In this video we are going to discuss the various types
of network penetration testing. We will
take a look at their advantages and disadvantages. So
let's dive on in
Commonly, there's internal Network penetration testing
an external network penetration testing.
To put simply internal Network penetration testing allows
cyber Security Professionals such
as ethical hackers penetration testers
and also write teams to determine
the security posture of the sets
that exists within the internal Network or fun
organization internal Network
penetration system also helps organizations to
easily determine whether their
systems are compliant to various regulatory
standards to also the
two men whether they're treating and mitigation
systems are waking us expected to
determine whether they are security
controls are able to block any sort
of suspicious activities on the
internet.
Imagine if an organization implemented security
controls, but let's say these security
controls will not actually blocking any sort
of malicious or suspicious activities. Then a
traductor will be able to compromise the
network therefore until Network
penetrations lesson Hub determine the
security posture of all of these different systems and
to determine whether these security controls are
working as expected.
There's also the external network penetration
tests with external network
penetration testing. It helps organizations to
determine whether their Network infrastructure are
they assets are actually exposed to
anyone on everyone on
the internet and these include the trade
actors. So yes, imagine an organization
connects their next week to the internet
and all of the assets. They are servers
their client devices are all exposed
to everyone on the internet. This means
to say that anyone can try to break into
the company or even still the editor.
Furthermore external network penetration
testing helps Security Professionals to
improve their attack surface management
by doing continuous testing to
ensure. No sort of let's say
internal devices or any assets only until
only internal Network are exposed
to anyone on the internet lastly external
network penetration test
and how so organizations to determine if
they're natural devices are security devices
are configured correctly to road traffic
uneven prevent malicious traffic
from entering the companies that took or
even leaving the network.
To take a deeper dive they are various types of security assessments
that are usually perform by ethical
lockers and penetration testers within
the industry.
First and foremost there's a black box testing in
a black box security assessment. The
penetration tester is not provided with
any sort of information or details about
the target except the name of the organization in
this type of security testing.
It provides a better approach on simulating
how a real traductor will attempt to
find organization and even gain
access to the systems.
During a black box test. There's a
higher possibility all likelihood the patient tester
will discover more security vulnerabilities
using this technique on
systems own by the client or
the customer.
Next there's a gray box test. Well, as
you can imagine the gray box
test is where the penetration tester is provided with
some information or very limited
information about our organization on its
systems are networks this type
of security testing provides a penetration tester
with very limited documentation on
a systems and the network
infrastructure owned by the client.
This type of security testing still enables the
patreon Tessa to discover as a many
security flaws on weaknesses as possible
on a client's Network.
And last but not least DSO white
box test and the white box test the
penetration tester or the security professional
is provided with full on
all details such as all information
about a client their systems
are their Network infrastructure to put simply
the penetration test says given all the details
this type of security testing enables
a painstation tester to Simply reduce
or spend less time during the
reconnaissance fees and simply apply more
time on focus on discovering any
sort of security flaws performing vulnerable
Tia analysis on even
exploiting those vulnerable systems.
This type of security test helps the penetration
tester to find security flows on systems
that are not easily found when performing
a black box test or a
gray box test.
During the course of this video. We have take a
look at understanding the various types of network penetration, testing
the advantages and disadvantages.
And the next video we'll be starting section 2.
I hope this video has been a formative for
you and thank you for viewing.