HOME EVENTS NEWS TEAM PARTNERING ABOUT US TRAINING CONTACT
  TEAM ACCESS
     Silver Access
     Gold Access
     Researcher Access
  ASSOCIATIONS 
     Auditors (ILA)
     Training Partners
     Platinum Team
  RESEARCH
     Business Integrity (BIT)
     Home Security (HSM)
     Networking Protocols (OPRP)
     Security Auditing (OSSTMM)
     Security Metrics (ravs)
     Child Security Awareness
     Teen Security Awareness
     Trusted Computing (AVIT)
     Security Models (SOMA)
     Code Analysis (SCARE)
     Security Tools
     Secure Programming
  CERTIFICATION 
     Security Analyst
     Security Expert
     Security Tester
     Wireless Security Expert
     Trust Analyst
     Security Awareness Instructor
     Certified People
     Companies & Products
 

OSSTMM - Open Source Security Testing Methodology Manual
by Pete Herzog



The Open Source Security Testing Methodology Manual (OSSTMM) is a peer-reviewed methodology for performing security tests and metrics. The OSSTMM test cases are divided into five channels (sections) which collectively test: information and data controls, personnel security awareness levels, fraud and social engineering control levels, computer and telecommunications networks, wireless devices, mobile devices, physical security access controls, security processes, and physical locations such as buildings, perimeters, and military bases.

The OSSTMM focuses on the technical details of exactly which items need to be tested, what to do before, during, and after a security test, and how to measure the results. New tests for international best practices, laws, regulations, and ethical concerns are regularly added and updated.

Provided here is the latest public release. To receive OSSTMM development status, notes, and betas, become part of the team. Subscribe now to join the ISECOM Gold or Silver Team or contact us with how you can help OSSTMM development and earn a place on the core development team.
 
 


 

To be notified about OSSTMM updates and other ISECOM projects
please join the ISECOM-NEWS List:


DOWNLOAD: 
 
 Name            

OSSTMM 3

The Open Source Security Testing Methodology Manual 3.0 covering security testing, security analysis, operational security metrics, trust analysis, operational trust metrics, and the tactics required to define and build the best possible security over Physical, Data Network, Wireless, Telecommunications, and Human channels.

OSSTMM 3.2 Draft

The road to OSSTMM 4 has begun and Platinum and Gold members get exclusive access to the latest tests, updates, and graphics in this current, latest draft.
 

OSSTMM 3.1 Draft

The first Beta on the way to OSSTMM 4 provides updates, fixes, and changes in advance before being released and presented to the public.

 

Join the ISECOM page on Facebook  Follow us on Twitter 

SUBSCRIBE TO ISECOM NEWS
 
VIEW ALL MAILING LISTS

Join the ISECOM PLATINUM, GOLD or SILVER TEAM
 

The OSSTMM was  awarded with InfoWorld's Bossies award
Best of Open Source in Security for 2007 

 

 

 

 


www.isecom.org - www.osstmm.org www.hackerhighschool.org - www.isestorm.org
www.opse.org - www.opst.org - www.opsa.org - www.owse.org
 If you have any comments, questions, or to note broken links on this website contact the Webmaster.