Penetration Testing mailing list archives
Risk metrics
From: RSMC <smcsoc () yahoo es>
Date: Mon, 31 Oct 2005 14:57:25 +0100 (CET)
Hi, As OSSTMM states, "Reports must use only qualitative metrics for gauging risks based on industry accepted methods". What metrics are more suitable to use in pen-testing services? Thanks in advance, Rafael San Miguel Carrasco ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- Risk metrics RSMC (Oct 31)