Attack and Penetration Test PlanScenario:
You are the owner and operator of a small information security consulting firm. You have received a request from one of your clients, Infusion Web Marketing, that you provide a written proposal for performing a penetration test on the company\u2019s production Web servers and corporate network.
Environment:
Scope
Production e-commerce Web application server, the e-commerce Web application server is acting as an external point-of-entry into the network:
\u2022 Ubuntu Linux 10.04 LTS Server (TargetUbuntu01)
\u2022 Apache Web Server running the e-commerce Web application server
\u2022 Credit card transaction processing occurs on all web servers.
Intrusive or Non-Intrusive Intrusive. The test will include penetrating past specific security checkpoints.<\/p>\n
Compromise or No Compromise No compromise. The test can compromise with written client authorization only.
Scheduling Between 2:00 a.m-6:00 a.m. weekend only (Saturday or Sunday)
Deliverables:
Using the information from the scenario above, provide a written attack and penetration testing plan, describing your firm\u2019s approach to performing the penetration test and what specific tasks, deliverables, and reports you will complete as part of your services. The plan should include these sections:
\u2022 Table of Contents
\u2022 Project Summary
\u2022 Goals and Objectives
\u2022 Tasks
\u2022 Reporting
\u2022 Schedule
Your penetration testing plan should be 2-3 pages in length, not including the title and references pages, and cite at least three credible sources other than the course materials. It should follow University academic writing standards and APA style guidelines, as appropriate.
It is strongly encouraged that you submit all assignments to the Turnitin Originality Check prior to submitting it to your instructor for grading. If you are unsure how to submit an assignment to the Originality Check tool, please review the Turnitin Originality Check Student Guide for step-by-step instructions.<\/p>\n
Helpful Resources:
The SANS Institute provides several resources that you might find helpful for this assignment:http:\/\/www.sans.org\/reading-room\/whitepapers\/testing
The National Institute for Standards and Technologies (NIST) also provides some guidance on this topic:http:\/\/csrc.nist.gov\/publications\/nistpubs\/800-115\/SP800-115.pdf<\/p>\n","protected":false},"excerpt":{"rendered":"
Attack and Penetration Test PlanScenario: You are the owner and operator of a small information security consulting firm. You have received a request from one of your clients, Infusion Web Marketing, that you provide a written proposal for performing a Read More …<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-83472","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts\/83472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/comments?post=83472"}],"version-history":[{"count":0,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts\/83472\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/media?parent=83472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/categories?post=83472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/tags?post=83472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}