 |
| |
 |
|
|
|
|
OSSTMM -
Open Source Security Testing Methodology Manual
by Pete Herzog
 The
Open Source Security Testing Methodology Manual (OSSTMM) is a
peer-reviewed methodology for performing security tests and metrics.
The OSSTMM test cases are divided into five channels (sections) which
collectively test: information and data controls, personnel security
awareness levels, fraud and social engineering control levels,
computer and telecommunications networks, wireless devices, mobile
devices, physical security access controls, security processes, and
physical locations such as buildings, perimeters, and military bases.
The OSSTMM focuses on the technical details of exactly which items
need to be tested, what to do before, during, and after a security
test, and how to measure the results. New tests for international best
practices, laws, regulations, and ethical concerns are regularly added
and updated.
Provided here is the latest public release. To receive OSSTMM
development status, notes, and betas, become part of the team.
Subscribe now to join the
ISECOM Gold or Silver
Team or contact us
with how you can help OSSTMM development and earn a
place on the core development team.
To be notified about OSSTMM
updates and other ISECOM projects
please join the ISECOM-NEWS List:
DOWNLOAD:
| Name
|
|
|
|
 |
|
The Open Source Security Testing
Methodology Manual 3.0 covering security testing, security analysis,
operational security metrics, trust analysis, operational trust metrics,
and the tactics required to define and build the best possible security
over Physical, Data Network, Wireless, Telecommunications, and Human
channels. |
|
OSSTMM 3.2
Draft
|
 |
The road to OSSTMM 4 has begun and Platinum and Gold
members get exclusive access to the latest tests, updates, and graphics
in this current, latest draft.
|
|
OSSTMM 3.1 Draft |
 |
The first Beta on the way to OSSTMM 4
provides updates, fixes, and changes in advance before being released
and presented to the public. |
|
The OSSTMM
was
awarded with
InfoWorld's
Bossies award
Best of Open Source in Security for 2007
|
|
|
TEAM ACCESS
