OSSTMM: The “Measure, Don’t Guess” Security Testing Methodology

1. OSSTMM The “Measure, Don’t Guess” Security Testing Methodology Jan Kopřiva ALEF CSIRT jan.kopriva@alef.com TLP: WHITE

2. whoami • Team Lead of CSIRT @ ALEF • Backround in both Blue and Red • In case of emergency, my head can be used as a disco ball

3. What is OSSTMM ?

4. OpSec

5. Controls

6. So how do we test?

7. One methodology

8. Does it sound interesting? • Read it (or the chapters which interest you) • Go for a certification

9. Thank you for your attention! TLP: WHITE

Recommended