Squadra tigre contro squadra rossa?

Ho solo sentito parlare di due tipi di squadre:

• Squadra blu: i difensori di una rete

• Squadra rossa - Attaccanti di una rete

• Squadra tigre - La stessa squadra rossa, tuttavia è un termine più vecchio di attacco / opposizione di un fidanzamento

• Squadra bianca: il team che stabilisce le regole di ingaggio e di solito sono i dipendenti dell'organizzazione. La squadra bianca non conduce alcun test.

Guida allo studio CISSP ha la seguente spiegazione dei diversi team:

White team A neutral team of employees acting as observers, referees, and judges between > a red team of mock attackers (offenders) and a blue team of actual defenders of their enterprise’s use of information systems. The white team establishes rules of engagement (ROE) and performance metrics for security tests. The white team is also responsible for deriving lessons-learned, conducting the post engagement assessment, and communicating results to management. Occasionally, the white team also performs incident response activities and addresses bot attacks on an emergency basis.

da: link

There are multiple definitions for Red Teaming, according to the specific domain of activity (e.g. military, computers, corporate, etc).

In the context of information security, the term Red Teaming is closely related to other terms like penetration testing, ethical hacking, tiger teaming.

Even though the terms penetration testing, ethical hacking and tiger teaming are not precisely defined, they all refer to simulation of computer „hacking‟ activities for testing the security of an information system.