Penetration Testing

Penetration testing examines IT security by evaluating the security profile of a system or environment from the perspective of a malicious source, and it can be an invaluable component of an organization's information security program. Typically, an environment is tested for potential vulnerabilities that may be the result of incorrect configuration, hardware or software vulnerabilities, or operational weaknesses in process or technical countermeasures.
 
There are many forms of penetration testing. One common type is Black Box testing, in which the testing team is given no information about the environment’s architecture or composition prior to conducting the test. This approach is much like assessing a barn for cracks by walking around the outside; the large cracks or missing boards are most easily visible.
 
On the other end of the spectrum is White Box testing, in which the details of the environment are shared with the evaluation team before the test. This method is akin to assessing a barn for cracks by walking inside on a sunny day; the sun streaming inside the barn makes even the smallest hole easily visible. In the case of applications, White Box testing usually involves a thorough inspection of the application code
.
Grey Box testing is somewhere in between; with this method, depending on the environment, the testers receive some internal detail as input to the test.
 
AppliedTrust’s certified security experts perform penetration testing of systems, networks, and applications all across the White Box–Black Box spectrum. We conduct these tests in an open, ethical way such that the results can be trusted, and your organization’s production environment isn’t unexpectedly impacted. For more information about how we can help you evaluate the security of your environment, give us a call at (303) 245-4545, or contact us online.