Penetration Testing (Pen-Testing)
Definition - What does Penetration Testing (Pen-Testing) mean?
Penetration testing (pen-testing or pentesting) is a method of testing, measuring and enhancing established security measures on information systems and support areas.
Pen-testing is also known as a security assessment.
Techopedia explains Penetration Testing (Pen-Testing)
Pen-testing may be conducted to complement background investigations and ensure social engineering and networking safety.
Pen-testing is implemented by simulating malicious attacks from an organization's internal and external users. The entire system is then analyzed for potential vulnerabilities. A plan that communicates test objectives, timetables and resources is developed prior to actual pen-testing.
Pen-testing is an invaluable process for a number of reasons, including the following:
- Minimal security breach potential ensures system reliability.
- Complies with regulatory or other agencies.
- Demonstrates a good-faith effort to protect customer information
Pen-testing tools include:
- Commercial off-the-shelf (COTS) or prebuilt equipment and/or software applications
- Proprietary enterprise applications (EA)
- Potentially compromisable phone and wireless systems
- Physical controls
- Websites
