Value of penetration testing

Description:If there is any value to be found in pen tests, and I believe that thereis, then it lies in an area that few people pay attention to when theylook at their pen test findings -- the procedural aspects. Further exacerbating thisweakness is the fact that the crop of available tools, whethercommercial or open source, typically only tests for an, arguably, smalland known set of vulnerabilities. This leaves the organizationwith, at best, a false sense of security or insecurity if the testresults are egregiously bad. But using the pen test findings to address and remedyprocedural problems can be a healthy way of improving your systemsmanagement processes. As I said, the tools that we have available today, at least for the mostpart, test for some set of known vulnerabilities, in much the same waythat an anti-virus scanner examines a system for a known set of viruses,Trojans, and other malicious software. Those are the types of questions that you should be addressing.

Views: 6379 Date: 2018-10-18 Favorited: 56