Repository logo
 
Publication

INTEGRATION OF INTELLIGENCE TECHNIQUES ON THE EXECUTION OF PENETRATION TESTS (iPENTEST)

2019-01-07Master thesis Open access
Simple item page
dc.contributor.advisorSilva, Rui Miguel
dc.contributor.authorAires Berbigão, Fábia Filipa
dc.date.accessioned2019-09-25T08:07:33Z
dc.date.available2019-09-25T08:07:33Z
dc.date.issued2019-01-07
dc.date.submitted2019-09-25
dc.description.abstractPenetration Tests (Pentests) identify potential vulnerabilities in the security of computer systems via security assessment. However, it should also benefit from widely recognized methodologies and recommendations within this field, as the Penetration Testing Execution Standard (PTES). The objective of this research is to explore PTES, particularly the three initial phases: 1. Pre-Engagement Interactions; 2. Intelligence Gathering; 3. Threat Modeling; and ultimately to apply Intelligence techniques to the Threat Modeling phase. To achieve this, we will use open-source and/or commercial tools to structure a process to clarify how the results were reached using the research inductive methodology. The following steps were implemented: i) critical review of the “Penetration Testing Execution Standard (PTES)”; ii) critical review of Intelligence Production Process; iii) specification and classification of contexts in which Intelligence could be applied; iv) definition of a methodology to apply Intelligence Techniques to the specified contexts; v) application and evaluation of the proposed methodology to real case study as proof of concept. This research has the ambition to develop a model grounded on Intelligence techniques to be applied on PTES Threat Modeling phase.pt_PT
dc.identifier.tid202261603pt_PT
dc.identifier.urihttp://hdl.handle.net/10400.26/29834
dc.language.isoengpt_PT
dc.subjectIntelligence; Pentesting; PTES; Structured Analytic Techniques; Threat Modelingpt_PT
dc.titleINTEGRATION OF INTELLIGENCE TECHNIQUES ON THE EXECUTION OF PENETRATION TESTS (iPENTEST)pt_PT
dc.typemaster thesis
dspace.entity.typePublication
rcaap.rightsopenAccesspt_PT
rcaap.typemasterThesispt_PT
thesis.degree.grantorAcademia Militar

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
Berbigão F. (2019). Integration of Intelligence Techniques on the Execution of Penetration Tests (iPentest).pdf
Size:
4.41 MB
Format:
Adobe Portable Document Format
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.85 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

AM - EPG - GI - MGI - Mestrado em Guerra de Informação