Navy Handbook for the Computer Security Certification of Trusted Systems: Penetration Testing

Published: Feb 21, 2000
Updated: Feb 21, 2000
Section: Network Security Library :: Policy & Standards
Author: Unisys Government Systems
Printable Version
Adjust font size:
Rating: 3/5 - 3 Votes

This guideline is a definitive statement of what constitutes good penetration testing, where it fits in the DOD Standard Software Engineering and TCSEC life cycles, and how it is done according to the best available practice, the Flaw Hypothesis Methodology (FHM). A review of the TCSEC assurance products is presented, as they form evidence of a chain of reasoning on the compliance of the target system to a given evaluation class, and against which penetration testing is mounted.

Click Here to download this article