测试网络的外围很重要,但攻击者可能已经位于网络内部。攻击者可能是一位有不满情绪的员工,或者是利用防火墙内服务和周边安全防御的外部人员。如果要测试内部安全控制,那么您需要考虑多个方面,包括各种内部测试、您可能希望使用的测试技术和测试员工的重要性(社会工程测试)。 Testing the perimeter of the network is important, but the attacker may already be inside the network. An attacker could be a disgruntled employee or an outsider who takes advantage of in-firewall services and perimeter security. There are several aspects to consider when testing your internal safety controls, including various internal tests, the testing techniques you may want to use, and the importance of testing employees (social engineering tests).