Select your testing viewpoint

- There are several different viewpoints…you can take when conducting technical security assessments.…The one you select will govern the testing methodology…you follow and which testing techniques you use.…The viewpoints we'll consider are external and internal,…and overt and covert.…External security testing is done outside…of your organization's network…and physical security perimeter.…Its purpose is to simulate…what an attacker outside of your organization,…whether it's from the internet…or simply outside of your building,…might be able to accomplish.…

From the external viewpoint…you'll be focusing on security vulnerabilities…which will allow you to penetrate…the perimeter defenses…and gain access to internal systems and data.…External security assessments generally follow three phases,…reconnaissance, enumeration and testing.…Reconnaissance techniques…include researching publicly available information…about a target, such as domain registry information,…to gather any relevant details…which may help conduct the tests,…