The Open Source Security Testing Methodology Manual (OSSTMM) is a peer-reviewed methodology for performing security tests and metrics.
Information
- Founded:
- January 2001
Photos
1 albumSee All
Wall PhotosCreated about a month ago
No one has added fan photos.
OSSTMM just to try it, we used the RAVs from OSSTMM 3 to find the Attack Surface of a Person to measure their exposure to the H1N1 virus. Interesting results. A Healthy adult is more protected than Healthy adult + Vaccine.
Actual Security to H1N1 Virus based on the RAVs from ISECOM The RAV shows how much you are protected to a particular threat. The higher the number, the more you are protected...
By:Pete
Manuel Moreno Leiva Can be great if any official training center be in Chile or Latam... we can´t found no one here in Latam! :(
OSSTMM We recently finished the re-design of the new RAV calculation sheet to measure the attack surface of anything. Those not familiar, the RAVs are the core of the OSSTMM providing mathematical sensibility and logic to the currently chaotic practice of security testing.
Alvin Singh Khadaroo How to get started in Mauritius
Michael Mondragon How do I become a contributor to OSSTMM/ISECOM?
OSSTMM Started mapping out OSSTMM 4 as we close OSSTMM 3. So far, planned for 4 is tighter integration with Trust Metrics in the tests for improved segregation of resources leading to less maintenance needs and costs. Also looking to integrate the Möbius Defense in as well. Many smaller improvements will also follow. Anything else? Now taking suggestions.
Reebal Ghrawi I'm looking for ISECOM classes in the KSA - Jeddah ??
OSSTMM
Anyone interested in getting involved in the Bad People Project? http://www.facebook.com/note.php?note_id
What do bad people look like to children? This is my submission to how kids envision "bad people". Instructions: This is to be a part of the gallery of "bad people" drawings from children to promote child safety and security projects at ISECOM (www.isecom.org)...
By:Pete
OSSTMM Just a reminder to people looking for ISECOM classes in the USA: there will be one next month in Indianapolis. It is the OSSTMM Security Analyst class from Sept. 21 - 25 and includes the Certification Exam. For more details contact Chris Griffin at 317-903-6516 or by e-mail to info@isecom.org.
Chandrasekar Umapathy I am from India What is the best way to acheive OPST certification.
Iip Permana
May I ask some question ?
There is possible to use OSSTMM 3.0 to test security of mobile banking using Transport Layer Security(TLS) in Wireless Application Protocol(WAP 2.0) ?
The target is confidentiality, message integrity, mutual authentication, non-repudiation, and prevent replay attack.
Would it be complicated for me to do ?
I use this for my final work at my collage to get bachelor degree.
OSSTMM
Pete's "surprise" interview after his presentation at Black Hat Amsterdam has been posted: http://www.madison-gurkha.com/en/gurkhas
Source: www.madison-gurkha.com
Madison Gurkha: Madison Gurkha supports organizations with high quality services to efficiently identify, decrease and prevent IT security risks
OSSTMM
Pete applied OSSTMM 3 research to show why Defense in Depth doesn't work for network security. It also shows the new attack visualization technique he developed as well as the REAL origin of Defense in Depth. You can get the presentation here: http://www.isecom.org/events/The_Mobius_
Source: www.isecom.org
OSSTMM The last chapter of the OSSTMM 3 just finished! Celebration time! It's going out now to reviewers!
