Countermeasures in Penetration Testing - And now?

The focus of a penetration test usually revolves around the identification of vulnerabilities, their exploitation and the estimation of potential damages. “Vulnerability” is a flexible term in that regard: Depending on the scope of the project, vulnerabilities can be of a specific technical nature, or of a broader, generic nature.This paper was written in 2017 as part of a research project at scip AG, Switzerland. It was initially published online at https://www.scip.ch/en/?labs.20170119 and is available in English and German. Providing our clients with innovative research for the information technology of the future is an essential part of our company culture