Grey-Box Testing

White-Box Testing

Black-Box Testing

To encrypt data for ransom

To gather sensitive information from a target

To launch a large-scale cyberattack

To trigger a malicious action based on specific conditions

Availability

Utility

Integrity

Confidentiality

Action Driven 

Humanitarian 

Financial 

Espionage

Fraud

Network intrusion or unauthorized access

Posting and/or transmitting illegal material

Identity theft

CIA

Disruption

Unauthorized altercation

Improper disclosure

Cyber Criminal

System Administrator

Cracker

Script Kiddie 

Using social media to launch cyberattacks

Enhancing social skills to prevent cyber threats

Developing software for social networks

Manipulating people to reveal sensitive information or perform certain actions

Active information gathering

Passive information gathering from publicly available sources

Physical penetration testing

Engaging the target

HTTPS

SecureProtocol

HighSecurityWebProtocol

HTTP