Attack and Penetration Test Plan

Scenario:

You are the owner and operator of a small information security consulting firm. You have received a request from one of your clients, Infusion Web Marketing, that you provide a written proposal for performing a penetration test on the company’s production Web servers and corporate network.

Environment:

Deliverables:

Using the information from the scenario above, provide a written attack and penetration testing plan, describing your firm’s approach to performing the penetration test and what specific tasks, deliverables, and reports you will complete as part of your services. The plan should include these sections:

·         Table of Contents

·         Project Summary

·         Goals and Objectives

·         Tasks

·         Reporting

·         Schedule

Your penetration testing plan should be 2 pages in length, not including the title and references pages, and cite at least three credible sources other than the course materials. It should follow APA style guidelines, as appropriate.

Helpful Resources:

The SANS Institute provides several resources that you might find helpful for this assignment: http://www.sans.org/reading-room/whitepapers/testing

The National Institute for Standards and Technologies (NIST) also provides some guidance on this topic: http://csrc.nist.gov/publications/nistpubs/800-115/SP800-115.pdf

(textbook) Chapter 2 in Hacker Techniques, Tools, and Incident Handling