# A Systematic Literature Review on Penetration Testing in Networks: Future Research Directions
## 3 Literature Review
### Detecting Open Ports and Possible Attacks
It discussed that with the technique of VAPT, a user can discover the vulnerabilities that can lead to a variety of malicious attacks such as a denial-of-service DoS attack. Finally, the Nmap tool was implemented to track the activities of attackers and victims. It recommended performing a lot of security and pentesting, as the number of cyber attacks is increasing with the growing use of digital payments and the storage of digital data. The purpose of the study by [PERSON], [PERSON] et al. [10] was to focus on discussing the factors and components to be considered when performing penetration tests. The study contained an analysis of the methods used and the function of penetration testing in the implementation of IT governance in an organization. The methods based on the available information were black box, white box, and gray box. Penetration testing strategies were presented: external penetration, internal penetration, router penetration, firewall penetration, application penetration, password cracking penetration, and social engineering penetration. There were three phases for performing penetration testing at different levels of organizations and business units, namely test preparation, test execution, and test analysis. The main tools were discussed, namely Nmap, BeEF, Metasploit, Nessus, and Cain and Abel. Finally, penetration testing was discussed in IT security standards such as ISO 27000 as well as the ethics that the penetration testing team must possess. ISO standards used an information security management system based on the PDCA model, also known as the plan-do-check -act model, for penetration testing. The purpose of the study by [PERSON], [PERSON] et al. [19] was to implement the vulnerability management process by applying a vulnerability assessment and penetration test (VAPT), to fix the vulnerabilities found in the network and to create an improved version of the network. In addition, it proposed to create 12 servers and a firewall by installing their respective OS images in the hypervisor. In the vulnerability assessment phase, the OpenVAS application used the Greenbone community feed to run the Linux environment. Then, Kali Linux was installed in the testing phase to use Metasploit for attack penetration. In this paper, it is suggested to install Fail2 Ban to prevent brute force attacks via SSH. It also suggested updating the firewall by creating additional firewall policies. Upon applying the suggested measures, the vulnerabilities decreased compared to the results before implementing the suggestions. Finally, it suggested using manage switches to monitor and control the network LAN and prevent active threats. The paper recommended using other security configurations with Manage switches to protect the network. The purpose of the study by [PERSON] et al. [20] was to introduce a penetration testing framework for large networks based on network fingerprinting to address the limitations of traditional penetration testing in large networks. Two techniques were discussed, namely network fingerprinting and cyberspace search engine. There are two categories of fingerprint identification methods, namely active and passive. The active fingerprint requires tools to actively scan the network system for information, while the passive fingerprint passively listens to the network to obtain information. The proposed system architecture included the target acquisition module, the data processing module, and the test module. Finally, the advantages of using the proposed framework were discussed such as saving testing resources and limiting the risk of missing information. The purpose of the study by [PERSON] and [PERSON] [21] was to provide an overview of penetration testing for wireless infrastructure security. Vulnerabilities put an organization's sensitive data at risk of attack, such as a poor framework and human error.