Português
Ciência_Iscte
Publications
Publication Detailed Description
External footprinting security assessments: Combining the PTES framework with open-source tools to conduct external footprinting security assessments
Proceedings of the IEEE International Conference on Information Society (i-Society 2014)
Year (definitive publication)
2014
Language
English
Country
United States of America
More Information
Web of Science®
Scopus
Google Scholar
This publication is not indexed in Overton
Abstract
security assessment activity (either legitimate or not) consists in the information gathering about a specific target. Information gathering, also recognized as footprinting, is the process of collecting all accessible information about that specific target. In a security assessment, the importance of this phase is clamorous and involves the examination, collection and classification of large volumes of data from the target network. The Penetration Testing Execution Standard (PTES), although still in an early and definition stage, provides the description of the processes that are necessary to conduct penetration-testing assessments in a generic and integrated manner. The focus of this article consists in the analysis of the PTES and its recommendations on what concerns footprinting processes and to provide some contributions in terms of the practical applicability of the PTES recommendations.
Acknowledgements
--
Keywords
Penetration testing,Pentests,Network vulnerabilities,PTES,Footprinting
Fields of Science and Technology Classification
- Physical Sciences - Natural Sciences
Funding Records
| Funding Reference | Funding Entity |
|---|---|
| UID/MULTI/0446/2013 | Fundação para a Ciência e a Tecnologia |
