CISO's Guide to Penetration Testing

3The Framework

What is a framework? Moreover, how does it apply to attacking a system? Finally, is a framework a methodology? A framework is collection of measurable tasks, whereas a methodology is a specific set of inputs, processes, and their outputs. A framework provides a hierarchy of steps, taking into consideration the relationships that can be formed when executing a task given a specific method.

For example, this book presents a framework of steps with options within each, and they appear as chapters, headings, and so forth. The context within each section of this book introduces methods for performing certain tasks, heeding the value represented by other points within the framework. When combined, an entire process geared toward value ...