📅 最后修改于: 2020-12-06 11:36:58 🧑 作者: Mango
渗透测试与道德黑客非常相关，因此这两个术语经常互换使用。但是，这两个术语之间的区别很小。本章提供有关渗透测试和道德黑客之间的一些基本概念和根本区别的见解。
渗透测试是一个特定术语，仅专注于发现漏洞，风险和目标环境，目的是保护和控制系统。换句话说，渗透测试针对的是由所有计算机系统及其基础结构组成的相应组织的防御系统。
另一方面，道德黑客是一个广泛的术语，涵盖所有黑客技术以及其他关联的计算机攻击技术。因此，除了发现安全漏洞和漏洞，并确保目标系统的安全性之外，它不仅是对系统进行黑客攻击，而且具有获得许可以保护将来的安全性的权限。因此，我们可以说，这是一个概括性术语，而渗透测试是道德黑客的特征之一。
以下是下表中列出的渗透测试和道德黑客之间的主要区别-
| Penetration Testing | Ethical Hacking |
|---|---|
| A narrow term focuses on penetration testing only to secure the security system. | A comprehensive term and penetration testing is one of its features. |
| A tester essentially does need to have a comprehensive knowledge of everything rather required to have the knowledge of only the specific area for which he conducts pen testing. | An ethical hacker essentially needs to have a comprehensive knowledge of software programming as well as hardware. |
| A tester not necessarily required to be a good report writer. | An ethical hacker essentially needs to be an expert on report writing. |
| Any tester with some inputs of penetration testing can perform pen test. | It requires to be an expert professional in the subject, who has the obligatory certification of ethical hacking to be effective. |
| Paper work in less compared to Ethical hacking. | A detailed paper works are required, including legal agreement etc. |
| To perform this type of testing, less time required. | Ethical hacking involves lot of time and effort compared to Penetration testing. |
| Normally, accessibility of whole computer systems and its infrastructure doesn’t require. Accessibility is required only for the part for which the tester performing pen testing. | As per the situation, it normally requires a whole range of accessibility all computer systems and its infrastructure. |
由于使用渗透技术来防御威胁，潜在的攻击者也迅速变得越来越复杂，并在当前应用程序中发明了新的弱点。因此，特定种类的单渗透测试不足以保护您所测试系统的安全性。
根据报告，在某些情况下，会发现一个新的安全漏洞，并且在渗透测试后会立即进行成功的攻击。但是，这并不意味着渗透测试是无用的。这仅意味着，通过彻底的渗透测试，这不能保证不会发生成功的攻击，但是可以肯定的是，该测试将大大降低成功攻击的可能性。