Penetration testing, often abbreviated as pentest, is a process that is followed to conduct an in-depth security assessment or audit. A methodology defines a set of rules, practices, and procedures that are pursued and implemented during the course of any information security audit program. A penetration testing methodology defines a roadmap with practical ideas and proven practices that can be followed to assess the true security posture of a network, application, system, or any combination thereof. This chapter offers summaries of several key penetration testing methodologies. Key topics covered in this chapter include:
A discussion on two well-known types of penetration testing—black box and white box
Describing the differences between the vulnerability assessment and penetration testing
Explaining several industry-acceptable security testing methodologies and their core functions, features, and benefits
A general penetration testing methodology...