...Megan Patterson IS4560 Monday E1 Class Week 1-Penetration Test Plan June 17, 2013 Attack and Penetration Test Plan Megan Patterson IS4560 Childers June 17, 2013 External Penetration testing tests the security surrounding externally connected systems from the Internet, as well as within a corporate network. Controlled tests are used to gain access to Internet resources and ultimately to the DMZ, which is an internal network; by going through and around firewalls from the Internet. External Penetration Testing involves the finding and exploitation of actual known and unknown vulnerabilities from the perspective of an outside attacker. The External Attack and Penetration testing Process is as follows: * Phase 1-Discovery * Analysis * Footprint * Identify * Phase 2-Services * Ping * Map * Scan * Phase 3-Enumeration * Extract * Collect * Intrusive * Phase 4-Application Layer Testing * Manual * Depth * Blind * Phase 5-Exploit * Attack * Penetrate * Compromise The purpose of the External Attack and Penetration testing plan is to outline on what to do for an external penetration test within a corporate network. The goals for this plan if it is successful, is that to go ahead and deploy whatever the tester is testing after documentation has been written, saved, and reviewed by the IT staff. If the plan is not successful, then the tester needs to go through the steps of retesting the application...
Words: 402 - Pages: 2
...We will be creating a test plan for the SCR TIMS project that will use only the related items to the SCR TIMS network. This plan will address the testing strategies and all the quality requirements. There will be a Master Test Plan that will show a testing schedule and it will have four levels of testing. These levels will include the System, Acceptance, Unit and Integration. The test items will include: • Server Machine • Network Communication • Disk Arrays • Client Machines 1. Executives 2. Administrators 3. Project Managers 4. Systems 5. Business Solutions Network • Firewalls • Printers • Faxes • Scanners The Risks would be: • Network Security- This must be defined and verified and has to access everything within the network. • Backup and...
Words: 536 - Pages: 3
...Physical Ability Test Plan Individual Assessment questionnaire: 1. Prior to being hired were you asked to take any physical ability test? Yes, the position required me to lift up to 70 pounds, I also had to operate a manual transmission U.P.S. vehicle, and forklift test. 2. What do you perceive to be the physical demands of your job? The demands are injuries, stress, physical strain, and working harder and longer hours. 3. On a scale of 1 to 5, with 5 meaning very physically demanding and 1 meaning not at all physically demanding, how physically demanding would you say your job is? I say 4, because getting a strain, sprain, or rupture to your knees, back, or shoulder happens to often, considering when delivering up to 500 packages in a day, and I make about 20 stops an hour. 4. Are there physical demands you were unaware of prior to accepting your position? Yes, the stamina, body movement, and your endurance that you will need to fulfill the long hours working, and the continuous tracking of packages, and there is a high interaction with customers. 5. Do you believe physical ability tests should be given to individuals being considered for your type of work? If yes, what types of physical tests would you recommend? I would recommend a manual dexterity test, static strength test, and reaction time test. 6. This job will require the ability to perform strength, stamina functions for moderate to extended periods of time...
Words: 1158 - Pages: 5
...Task ID WBS ID Task Name Work Est (days) Leveling Delay Predecessors Resource Name 1 1 Overall Project 0 edays 2 1.1 Project Management 0 edays 3 1.1.1 Manage Project 127 0 edays Chris Johnson (Project Manager) 4 1.2 System Requirements 0 edays 5 1.2.1 Gather Business Requirements 8 0 edays Ryan Neff (Functional Lead),Stacy Lyle (Functional Analyst) 6 1.2.2 Design Business Process Flows 4 0 edays 5 Ryan Neff (Functional Lead),Stacy Lyle (Functional Analyst) 7 1.2.3 Finalize Technical Requirements 6 0 edays Rick Burke (Infrastructure Lead) 8 1.2.4 Create Operational Requirements 15 0 edays 5,6 Ryan Neff (Functional Lead),Stacy Lyle (Functional Analyst),Rick Burke (Infrastructure Lead) 9 1.2.5 Identify Technical Infrastructure Needs 2 0 edays 7,8 Rick Burke (Infrastructure Lead) 10 1.3 Software Requirements 0 edays 11 1.3.1 Create Functional Requirements 0 edays 5,6,8 12 1.3.1.1 Capture Customer Profile 4 0 edays Ryan Neff (Functional Lead) 13 1.3.1.2 View and Search Product Catalog 6 5 edays Ryan Neff (Functional Lead) 14 1.3.1.3 Updating and Calculating Shopping Cart 3 0 edays 13 Ryan Neff (Functional Lead) 15 1.3.1.4 Taking Payments 6 6 edays Stacy Lyle (Functional Analyst) 16 1.3.1.5 Submit Order 4 0 edays 12,13,14,15 Ryan Neff (Functional Lead) 17 1.3.1.6 Check Order History & Order Status 3 0 edays 16 Ryan Neff (Functional Lead) 18 1.3.2 Create Data Requirements 3 0 edays 12,13 Stacy Lyle (Functional Analyst) 19 1.3.3 Create ERP Interface...
Words: 1091 - Pages: 5
...CHAPTER 4 PRESENTATION, ANALYSIS AND INTERPRETATION OF DATA This chapter presents the results of the survey on different reviewing strategies that are beneficial for the preparation in taking Nursing Licensure Examination of the 4th year nursing students batch 2010-2011, analysis and interpretation of data. Sample characteristics One hundred three Fourth Year Nursing Students of Laguna College Batch 2010-2011, sixty July 2010 Nursing Licensure Examination passers and twenty Clinical Instructors and Administrators completed the questionnaires. Participant characteristics are shown in Figures 4.1, 4.2, 4.3, 4.4 and __________. [pic] Figure 4.1. Age Distribution of the 4th Year Laguna College Nursing Students According to Figure 4.1 the age distribution profile of 4th year nursing students of Laguna College batch 2010 -2011 with a total of 103 taken as population sample has 44% or 45 respondents of age 19 years old and below, 50% or 52 respondents from age 20-25 years old and 6% or 6 respondents from age 26 years old and above. [pic] Figure 4.2. Gender Distribution of the 4th Year Laguna College Nursing Students Figure 4.2 shows that out of the 103 fourth year nursing students taken as sample population, 73 respondents or 75% of the sample population are female and 30 respondents or 25% of the sample populations are male. [pic] Figure 4.3. Age Distribution of the...
Words: 1861 - Pages: 8
...http://www.softwaretestinghelp.com/ Test Plan Template: (Name of the Product) Prepared by: (Names of Preparers) (Date) TABLE OF CONTENTS 1.0 INTRODUCTION 2.0 OBJECTIVES AND TASKS 2.1 Objectives 2.2 Tasks 3.0 SCOPE 4.0 Testing Strategy 4.1 Alpha Testing (Unit Testing) 4.2 System and Integration Testing 4.3 Performance and Stress Testing 4.4 User Acceptance Testing 4.5 Batch Testing 4.6 Automated Regression Testing 4.7 Beta Testing 5.0 Hardware Requirements 6.0 Environment Requirements 6.1 Main Frame 6.2 Workstation 7.0 Test Schedule 8.0 Control Procedures 9.0 Features to Be Tested 10.0 Features Not to Be Tested 11.0 Resources/Roles & Responsibilities 12.0 Schedules 13.0 Significantly Impacted Departments (SIDs) 14.0 Dependencies 15.0 Risks/Assumptions 16.0 Tools 17.0 Approvals 1.0 INTRODUCTION A brief summary of the product being tested. Outline all the functions at a high level. 2.0 OBJECTIVES AND TASKS 2.1 Objectives Describe the objectives supported by the Master Test Plan, eg., defining tasks and responsibilities, vehicle for communication, document to be used as a service level agreement, etc. 2.2 Tasks List all tasks identified by this Test Plan, i.e., testing, post-testing, problem reporting, etc. 3.0 SCOPE General This section describes what is being tested, such as all the functions of a specific product, its existing interfaces, integration of all functions. Tactics List here how you will accomplish the items that you have listed in the "Scope" section. For...
Words: 1343 - Pages: 6
...processes, build standards and help build the document from the template. All such red and blue text should be removed before submitting any formal documentation, including both draft and/or final, deliverables. **** Table of Contents 1 Introduction 3 1.1 Scope 3 1.1.1 In Scope 3 1.1.2 Out of Scope 3 1.2 Quality Objective 3 1.2.1 Primary Objective 3 1.2.2 Secondary Objective 4 1.3 Roles and Responsibilities 4 1.3.1 Developer 4 1.3.2 Adopter 4 1.3.3 Testing Process Management Team 4 1.4 Assumptions for Test Execution 5 1.5 Constraints for Test Execution 5 1.6 Definitions 6 2 Test Methodology 6 2.1 Purpose 6 2.1.1 Overview 6 2.1.2 Usability Testing 6 2.1.3 Unit Testing (Multiple) 7 2.1.4 Iteration/Regression Testing 7 2.1.5 Final release Testing 7 2.1.6 Testing completeness Criteria 8 2.2 Test Levels 8 2.2.1 Build Tests 8 2.2.1.1 Level 1 -...
Words: 5532 - Pages: 23
...Malcolm Testing Solution’s Penetration Test Plan Customer: The Fitness Club Introduction: The Fitness Club has already been victim to hacking that took place on their web server. They are unsure if this occurred due to a former administrator who quit or if by an external party. Malcolm Testing Solutions has been tasked with creating a penetration test plan to prevent further acts of attack on the Fitness Club’s network. The objective of the assessment is to provide feedback to The Fitness Club with respect to its ability to preserve the confidentiality, Integrity, and availability of the information maintained by and used by its origination. Malcolm Testing Solutions will test the use of security controls used to secure sensitive data. Services Overview: This project shall include 1 consultant for a time period of 2 days onsite at a single customer location to provide internal penetration test services. Malcolm Testing Solutions will provide tools, knowledge and expertise to execute an internal penetration test on customer designated devices. Malcolm Testing Solutions will attempt to compromise the access controls on designated systems by employing the following methodology: 1. Enumeration – Once Malcolm Testing Solutions has arrived for The Fitness Club’s assessment they will connect to the network via the data port provided by the customer. Once connected, Malcolm Testing Solutions will run a variety of information gathering tools in order to enumerate computers and devices...
Words: 566 - Pages: 3
...Sample Master Test Plan TEST PLAN IDENTIFIERRS-MTP01.3 REFERENCES None Identified. INTRODUCTION This is the Master Test Plan for the Reassigned Sales Re-write project. This plan will address only those items and elements that are related to the Reassigned Sales process, both directly and indirectly affected elements will be addressed. The primary focus of this plan is to ensure that the new Reassigned Sales application provides the same level of information and detail as the current system while allowing for improvements and increases in data acquisition and level of details available (granularity). The project will have three levels of testing, Unit, System/Integration and Acceptance. The details for each level are addressed in the approach section and will be further defined in the level specific plans. The estimated time line for this project is very aggressive (six (6) months), as such, any delays in the development process or in the installation and verification of the third party software could have significant effects on the test plan. The acceptance testing is expected to take one (1) month from the date of application delivery from system test and is to be done in parallel with the current application process. TEST ITEMS The following is a list, by version and release, of the items to be tested: A. EXTOL EDI package, Version 3.0 If a new release is available prior to roll-out it will not be used until after installation. It will be a separate upgrade/update...
Words: 3503 - Pages: 15
...Attack and Penetration Test Plan Part 1: Table of Contents 2. Scope 3 .Goals and Objectives 4. Tasks 5. Reporting 6. Schedule 7. Unanswered Questions 8. Authorization Letter Part 2: Scope Production e-commerce Web application server and Cisco network. Located on ASA_Instructor, the e-commerce web application server is acting as an external point-of-entry into the network: • Ubuntu Linux 10.04 LTS Server (TargerUbuntu01) • Apache Web Server running the e-commerce Web application server • Credit Card transaction processing occurs The test will be intrusive, meaning specific security points will be passed. Part 3: Goals and Objectives • If security software is up to speed, and penetration is not possible, a positive result will be given. If security software is not what it should be, penetration will be easy and the results will be explained to you in a separate report. Part 4: Tasks • Determine website size • Determine code of the website Part 5: Reporting • Upon completion of the penetration test, all results found will be in a separate report written by the person whom is performing the test. Part 6: Schedule Phase One-Information Collection (2 days) 1. Client authorization letter 2. Further client information 3. Get IT infrastructure Phase Two-Test Plan Development (3 days) 1. Determine scope 2. Use IT infrastructure to gain further knowledge about what is to be penetrated 3. List things to be penetrated and things that are off limits Phase...
Words: 458 - Pages: 2
...CONTENTS PART A The Graduate Marketplace 1 - 4 PART B Intended Career Path 5 - 11 PART C Next Step 12 - 13 Appendices Identified Target Position (Job Advertisement) Cover Letter for CV Curriculum Vitae (CV) Job Application Form Career Plan and Self Analysis Career Anchor Inventory Psychometric Test Reports : Verbal Reasoning Skills : Numerical Reasoning Skills : Abstract Reasoning Skills : Type Dynamics Indicator Observer Feedback Forms : Assessment Centre Activity PART A Industry The industry I have chosen is the Customer Service/Management Industry and it is my passion to be able to interact with clients and customers and cater their needs because almost every industry these days is based on customers’ feedback. Organizations work endlessly to increase their client satisfaction levels which are because customer service is a central fragment of preserving continuing customer relationships that are crucial to unending revenue. Not only companies but most industries now focus on customer satisfaction hence creating huge graduate employment opportunities as well as graduate training programmes...
Words: 2848 - Pages: 12
...insurance plan or confirming our observations in each stage. Crystal Ball software served as an analytical tool for our analysis. The simulations conducted for our analysis consisted of 10,000 trials each. See Appendix for illustrations related to this analysis. Analysis Detail Stage 1: A comparative analysis of the maximum values of the total losses and insurance costs in the first year showed that there is only one insurance plan that guarantees that the next year losses are not going to exceed $37 million: HIC ($33.8 million maximum). RNCN1 has a maximum of $43.8 million, which is reasonably close to the $41 million limit that we are aiming to avoid in the first year. We also noted that the Self-insurance plan has minimal expected costs of $4.6 million in first year, but bears the highest volatility, which may lead to losses of up to $170.5 million (See Exhibit 1). At this stage, we exclude the RNCN2 plan from further considerations because even though is offers low expected costs, the probability of going over the limit of $37 million and incurring costs of $60 million is significant for the purposes of this analysis. We plan to confirm this preliminary conclusion during the sensitivity analysis. Stage 2: The next step in our analysis is to look at the 5 year costs of the four remaining plans (refer to Exhibit 2). RNCN1 plan bears the highest 5 year expected costs ($113.6 million), so it’s fear to exclude it from further consideration. The remaining plans offer the following...
Words: 783 - Pages: 4
...AFM Assignment Question 2 Budgeting is a helpful budget worksheet that help you categorize your expenses and track your income and spending and hence, one can plan well for future monetary expenditure. Flexibility and inflexibility are key elements to successful budgeting and it can also act as a mean to estimate monthly expenses based on previous bills. Flexibility is not a fixed amount of budget. It is a good solution because when the company faces unexpected events , the money allocated for one purpose can be reallocated. On the other hand , inflexibility is having a specific amount of budget. It can be considered as a poor solution for companies as emergencies changes will not prioritized. In this modern and technological era, there are softwares that can help people carry out their budget planning. Firstly, it is important to make mental and physical note on your current expenses and then think critically on every penny that is spent. Next, one has to create the budget for the current month observing the expenses done in the previous step. Lastly, proper plans on how to spend need to be made with the help of online planning budget and it can help in the business as well as for the family expenses. There are two budgeting terms. One is long term budgeting other one is short term budgeting. Long term budgeting is looking at the future in order to know what the market needs.Short-term budgeting involves making budgets that is short-term, such as inventory...
Words: 761 - Pages: 4
...My Test Taking Plan My Test Taking Plan Briefly summarize your current test preparation strategy My test taking plan is pretty simple I look over my notes quickly before jumping into the test and just power through. I retain information fairly easily so test taking isn’t too hard for me when I actually learn the material on the test. List three strategies you can implement to improve your test preparation. Be specific in terms of how you will put these plans in to action 1. The first thing I can do is probably take more time and study the material that way I could retain more of the information and make it easier on myself. 2. I can also get rid of the extreme answers to heighten my possibilities of getting the answers correct this is useful if I don’t know the answer and I have to guess this could make it more likely answer it correctly. 3. Finally something else I can do is try to see if I can figure out the answer without looking at the possible answers to avoid confusing myself. Briefly summarize your current test preparation strategy My test taking plan is pretty simple I look over my notes quickly before jumping into the test and just power through. I retain information fairly easily so test taking isn’t too hard for me when I actually learn the material on the test. List three strategies you can implement to improve your test preparation. Be specific in terms of how you will put these plans in to action 4. The first thing I can do is...
Words: 363 - Pages: 2
... 1. The most important function of an accounting system is to: a. keep employees from embezzling funds. b. prepare accounting records. c. provide information from decision-making. d. Collect and record data. 2. The phases of an accounting system are: e. setting objectives, planning, analysis. f. identification, recording, analysis, reporting. g. evaluation, processing, output. h. none of the above. 3. The planning process for a business involves: i. setting objectives, long-term plans, and short-term plans. j. objectives and short-term plans. k. objectives and detailed budgets. l. long-term objectives, and long-term plans. 4. Control is best defined as: m. making the employees work harder. n. making the directors perform according to plan. o. giving orders. p. making events conform to plan. 5. Which of the following groups are users of financial information? q. Managers r. Lenders s. Owners t. All of the above 6. Four key qualitative characteristics of accounting information are: u. Understandability, identification, analysis and relevance. v. Control, planning, analysis and comparability. w. Relevance, reliability, comparability and understandability. x. Identification, analysis, reliability and timeliness 7. The best explanation of relevance is ensuring: y. That...
Words: 306 - Pages: 2
