ESTUDIO DE METODOLOGÍAS PARA PRUEBAS DE PENETRACIÓN A SISTEMAS INFORMÁTICOS

Abstract

This paper is the analysis of three penetration testing methodologies (NIST SP800-115, EC-Council LPT and OSSTMM), which is to describe its procedure, techniques, approach and the way each conceives the security in a computer system. Each methodology is described with flow charts and tables for better understanding. Then to understand each of the methodologies, the comparison is made between them, taking as reference the stages comprising an Ethical Hacking. In this way displayed the similarities and differences between each, resulting in the application of criteria for each of the methodologies