Penetration Testing (Types)

There are primarily three varieties of penetration testing: white field, black field, and grey field.

– White Box Testing
White field testing is when the testing crew has entry to network diagrams, asset data, and different helpful knowledge. This technique is used when budgets are tight and the quantity of allowed hours is proscribed. This kind of testing is the least lifelike, in of what an attacker could do.

– Black Box Testing
Black field testing is when there may be positively no info supplied to the penetration testing crew. Actually, utilizing this technique of testing, the penetration testing crew could solely be given the group title. Other instances, they might be given an IP vary and different parameters to restrict the potential for collateral harm. This kind of testing most precisely represents what an attacker could do and is probably the most lifelike.

– Gray Box Testing
Gray field testing is, you guessed it, someplace in between white field testing and black field testing. This is the very best form of penetration testing the place the penetration testing crew is supplied with restricted info and solely as wanted. So, as they work their manner from the skin in, extra entry to info is granted to hurry the method up. This technique of testing maximizes actuality whereas remaining price range pleasant.