Slashdot Mirror


OSSTMM 2.1 Released

Pete Herzog writes "Once again, we have officially released another OSSTMM! After over a year and a half we have improved the OSSTMM (Open Source Security Testing Methodology Manual)."As we worked on packaging the 2.1 release, we all saw so much more that we wanted to put in. However we decided to put out a strong framework so following releases can come more quickly and more often and we wouldn't have to keep changing the formatting. OSSTMM 2.1 includes a lot of new stuff for those who do or require security testing. I am very happy with the updates to the manual on a whole and it's worth seeing the changes for this incremental upgrade. The following changes are included: readability, document structure, all 6 methodologies have been updated, updated law compliancies and best practices, rules of engagement structure, rules of thumb for security testers and project planning, ISECOM rules of ethics, and RAVs. You can download it directly from www.osstmm.org."

1 of 10 comments (clear)

  1. Certification in Mexico by luissol · · Score: 0, Troll

    Hi, I work for GCP Global in Mexico, GCP Global is a security firm which greatly supports the Open Source Movement. I think this is a wonderful achievement for Open Source, it really means breaking the barrier of legacy tools with even greater coverage to increase security levels in any kind of organization. If you're interested about getting certified in my country you cand find all the details at http://www.gcpglobal.com