Читать книгу Hacking For Dummies - Kevin Beaver - Страница 54

One miscommunication or slip-up can send systems crashing during your security testing. No one wants that to happen. To prevent mishaps, develop and document testing standards. These standards should include

 When the tests are performed, along with the overall timeline

 Which tests are performed

 How much knowledge of the systems you require in advance

 How the tests are performed and from what source IP addresses (if performed via an external source via the Internet)

 What to do when a major vulnerability is discovered

This list is general best practices; you can apply more standards for your situation. The following sections describe these best practices in more detail.