Educause Security Discussion mailing list archives

Re: Penetration Testing vs the academic world


From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Thu, 12 Jan 2012 17:08:52 -0500

On Thu, 12 Jan 2012 18:24:11 -0200, Leandro Quibem Magnabosco said:

What I intend to do is to find out what topics are subject to further
development by the academia so I can contribute in my thesis.

There's a more general issue that academia almost always writes about
theoretical stuff and almost never worries about practical operational and
real-world issues (Gene Spafford and his crew at Purdue and Princeton's Freedom
To TInker group being two of the more notable exceptions).  So the first
question is whether your advisor will even accept a thesis on real-world
issues, because pen testing is almost entirely real-world issues like
statements of work, scope of testing, rules of engagement, what to do if an
armed guard catches you during a physical pen test, and things like that.

Good luck on the thesis...




Attachment: _bin
Description:


Current thread: