OSSTMM 3

Open Source Security Testing Methodology Manual, version 3, kept here as an unmodified reference copy for my security studies.

"The Open Source Security Testing Methodology Manual is a complete methodology for the testing, analysis and measurement of operational security towards building the best possible security defenses."

Contents

File	Description
Manual.pdf	Full OSSTMM 3 manual (PDF)

What it covers

• Operational security metrics (ravs) and attack surface measurement
• Test channels: Human, Physical, Wireless, Telecommunications and Data Networks
• Trust analysis and the security testing process
• Reporting with the Security Test Audit Report (STAR)

License and attribution

© ISECOM (Institute for Security and Open Methodologies). All rights to the manual belong to ISECOM.

The manual is published by ISECOM under the Creative Commons Attribution-NonCommercial-NoDerivs 3.0 license. This repository contains an unmodified copy shared for non-commercial reference only. No license of my own applies to it.

Official source: isecom.org/research