When the industry was in its infancy, the term Penetration Testing was commonly used to describe a test whereby an authorised individual would attempt to break into a computer system. Supposably this would give a real life „what a hacker could do‟ review of the security of a system.
Nowadays Penetration  testing  is widely  used  to  describe  a  security  review  of  IT Systems. This might include reviews of components such as:

来源：希赛网
在安全管理领域，最神秘的事情之一就是入侵者的行为方式。入侵者会做什么事情？以及他们是如何来做的？同所有重大的秘密一样，它也让许多人产生了浓厚的兴趣，同时也解释了关于实际网络攻击的书籍和教程大受欢迎的原因。如果你不具备所有正当访问权