OSSTMM 3.0 Lite publicly released

El paso 3 de agosto se publico la versión 3.0 Lite de OSSTMM (Open Source Security Testing Methodology Manual). El manual de 52 paginas tiene el titulo "Introduction and Sample to the Open Source Security Testing Methodology Manual"

El documento es una versión reducida del OSSTMM version 3.0, pero incluye "Data Networking tests" así como instrucciones sobre como implementarlo.

Table of Contents
- Introduction to the OSSTMM
- Compliance
- Security Test Types
- Methodology By Channel
- Testing Data Networks
- Security Test Audit Report (STAR)

The Open Source Security Testing Methodology Manual (OSSTMM) is a peer-reviewed methodology for performing security tests and metrics. The OSSTMM test cases are divided into five channels (sections) which collectively test: information and data controls, personnel security awareness levels, fraud and social engineering control levels, computer and telecommunications networks, wireless devices, mobile devices, physical security access controls, security processes, and physical locations such as buildings, perimeters, and military bases.

Podés descargar el manual en PDF.