High-level methodology for carrying out combined red and blue teams

Abstract

This paper proposes a combined Red and Blue Team Methodology to guide the process of carrying out such security auditing and penetration testing tasks. Red and Blue Teams consist of various security auditing and penetration testing tasks which serve to determine the current security baseline in an organisation. The practice of Red and Blue Teams has demonstrated that various data gathering, assessment and technological based activities form the foundation. In this way, the different activities were organised so as to structure and guide the execution of a combined Red and Blue Team.