# A Systematic Literature Review on Penetration Testing in Networks: Future Research Directions
## 3 Literature Review
### Techniques for Protecting Open Ports against Vulnerabilities  
The purpose of the study by [PERSON] et al. [30] was to propose the use of the Raspberry Pi 3b+ (portable minicomputer) in performing penetration testing to identify vulnerabilities in the network using assessment tools such as the integrated pentesting tool. The vulnerability assessment has three types, which are host-based, network-based, and database-based. In addition, the process of penetration testing was discussed, which consisted of reconnaissance, scanning, gaining access, maintaining access, and analysis. It also discussed how vulnerability assessment and penetration testing (VAPT) help assess and protect the system. There are advantages to using a single board to perform VAPT. This study will be helpful in developing portable devices in new and innovative ways to improve and strengthen cyber security. [PERSON] et al. [31] suggested finding an efficient way to detect Nmap scanning behavior because the intrusion detection system (IDS) is used to protect hosts from malicious intrusion. The authors proposed comprehensive Nmap detection rules (CNDR). In CNDR, Nmap's customizable fields were removed and rules for scanning the operating system were added. CNDR achieved 100 percent detection rate for normal Nmap scans and 91.7 percent detection accuracy for Nmap with IDS evasion on the researchers' designed database. \begin{table}
\begin{tabular}{c c c c c c} \hline \hline
**Author** & **Publication** & **Type of Network** & **Address Threats** & **Penetration Testing Techniques** & **Limitation** \\ \hline \hline \multirow{9}{*}{[PERSON], [PERSON] et al. [11]} & \multirow{9}{*}{2022} & \multirow{9}{*}{WLAN at SMP XYZ} & \multirow{9}{*}{There are vulnerabilities related to cracking WPA2, DoS, cracking wireless router passwords, and isolating access points.} & The authors used the penetration testing execution standard (PTES). The stages of the PTES are: pre-engagement, intelligence gathering threat modeling, vulnerability analysis, exploitation, post-exploitation, reporting. In addition the authors performed four types of attack tests and found a solution to fix the gaps. & There are no limitations. \\ \hline \hline \multirow{9}{*}{[PERSON], [PERSON] et al. [18]} & \multirow{9}{*}{2020} & \multirow{9}{*}{Campus Area Network} & \multirow{9}{*}{\
\begin{tabular}{c} There are vulnerabilities in the operating system. \\ \end{tabular} } & \multirow{9}{*}{
\begin{tabular}{c} The authors used gray hat penetration testing. \\ The phases were reconnaissance information collection, network scanning, exploitation, and post-exploitation.} & The results were not clear enough and there is no future view. \\ \hline \hline \multirow{9}{*}{[PERSON], [PERSON] et al. [17]} & \multirow{9}{*}{2018} & \multirow{9}{*}{WLAN} & \multirow{9}{*}{WLAN} & The authors conducted WLAN penetration testing in the following phases: reconnaissance, scanning, exploitation, and post exploitation. & The tests showed that be turned off and the passphrases changed regularly to prevent potential attackers from exploiting the vulnerabilities. Finally, the penetration tests showed that the security measures are in place but need to be improved and used more effectively. \\ \hline \hline \multirow{9}{*}{[PERSON], [PERSON] et al. [9]} & \multirow{9}{*}{2018} & \multirow{9}{*}{Internal Network} & The host was vulnerable to buffer overflow, spoofing, remote code execution, denial-of-service, and privilege escalation. & The proposed methodology for penetration testing are planning, vulnerability discovery, attack and reporting. & There are no limitations. \\ \hline \hline \end{tabular}
\end{table} 
Table 6: _Cont._[PERSON], [PERSON] et al. [32] conducted three types of attacks: port scanning, DDoS SYN flood, and brute force attack to analyze the performance of IDS (PSAD, Portsentry and Suricata) with certain parameters, namely detection speed, detection accuracy, and resource consumption. The authors found that the accuracy of the detection parameters was 100 percent for all three attacks.