"A typical security testing & evaluation program consists of activities like a network security audits, vulnerability assessments and penetration tests. Security Audits cover both security management processes and IT assets. The latter part of the security audit which covers IT assets is generally called a network vulnerability assessment. Now we come to the penetration tests and there are two broad types of penetration tests, the standard or network layer penetration test and the application layer penetration test."