{"id":565092,"date":"2024-06-16T11:24:11","date_gmt":"2024-06-16T08:24:11","guid":{"rendered":"https:\/\/eba.com.ua\/?p=565092"},"modified":"2024-06-16T11:24:11","modified_gmt":"2024-06-16T08:24:11","slug":"bdo-v-ukrayini-pro-vyyavlennya-vrazlyvostej-testuvannya-na-pronyknennya-yak-zasib-zahystu","status":"publish","type":"post","link":"https:\/\/eba.com.ua\/en\/bdo-v-ukrayini-pro-vyyavlennya-vrazlyvostej-testuvannya-na-pronyknennya-yak-zasib-zahystu\/","title":{"rendered":"[:ua]BDO \u0432 \u0423\u043a\u0440\u0430\u0457\u043d\u0456 \u043f\u0440\u043e \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u043d\u044f \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439: \u0442\u0435\u0441\u0442\u0443\u0432\u0430\u043d\u043d\u044f \u043d\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0435\u043d\u043d\u044f \u044f\u043a \u0437\u0430\u0441\u0456\u0431 \u0437\u0430\u0445\u0438\u0441\u0442\u0443[:en]BDO in Ukraine on vulnerability detection: penetration testing as a means of protection[:]"},"content":{"rendered":"

<\/p>\n

\"\"<\/p>\n

What is penetration testing? It is the direct testing of programs, devices, websites, organizations, and even the people who work in them. It involves trying to identify and then exploit various security vulnerabilities in these areas.<\/p>\n

Think of penetration testing<\/a> as trying to break into your own home. First, look around the house, try to shake the locks on the doors and raise the windows to check their security. Perhaps there is a hole in one of the walls that you have been planning to patch for a long time but forgot about. This way you can easily identify weaknesses in your security. Because you\u2019ve identified these problems, you can fix them before someone else uses it.<\/p>\n

Organizations should also conduct similar checks. Companies spend a lot of time and money on security. Trial testing helps to make sure that these efforts and investments are working effectively. Don\u2019t wait for an attacker to test your security system. This can lead to heavy fines, loss of reputation and theft of intellectual property. To be sure of your security, check the quality yourself.<\/p>\n

Penetration testers, also known as ethical hackers<\/strong>, assess the security of an IT infrastructure by using a controlled environment to safely attack, identify, and exploit vulnerabilities. Instead of checking windows and doors, they test servers, networks, web applications, mobile devices, and other potential vulnerability points to find weaknesses.<\/p>\n

Instead of a broken latch or a faulty lock, potential vulnerabilities in the IT environment include design or development errors, misconfiguration, weak passwords, insecure communications, and outdated systems and software.<\/p>\n

How does penetration testing work?<\/strong><\/h4>\n

Penetration testing<\/strong> is typically performed using manual or automated technologies to systematically compromise servers, endpoints, web applications, wireless networks, network devices, mobile devices, and other potential points of exposure. After successfully exploiting vulnerabilities in a particular system, testers may attempt to use the compromised system to further attack other internal resources in an effort to achieve higher levels of access to electronic assets and information through elevated privileges.<\/p>\n

Information about vulnerabilities successfully exploited during penetration testing is usually collected and provided to IT and network system managers. This helps them to draw strategic conclusions and prioritize appropriate remediation efforts. The main purpose of penetration testing is to assess the possibility of compromising systems or end users and to evaluate the impact of such incidents on the resources or operations involved.<\/p>\n

\"\"<\/p>\n

Penetration testing as a tool to ensure compliance with standards and regulations<\/strong><\/h4>\n

Pen testing, <\/strong>also known as penetration testing, is an important part of an information security compliance program. It helps organizations to proactively identify and remediate vulnerabilities in their systems, networks and applications, thereby reducing the risk of unauthorized access, data breaches and other cyber threats.<\/p>\n

Many industries and regulators require companies to conduct regular pen testing to ensure compliance with regulatory requirements such as PCI DSS<\/a>, HIPAA<\/a>, GDPR<\/a>, and ISO 27001<\/a>. Penetration testing helps organizations to demonstrate that they are taking the necessary steps to protect their data and systems.<\/p>\n