RE: Penetration testing via shrinkware

[Christopher Nicholls <chrisn () softway com au>]

At 02:02 PM 03/09/98 -0400, Gary Crumrine wrote:
<SNIPITY>
> I think there are a lot more people out there that don't have a clue 
> than the good guys.  Which makes for a very nice market to sell your 
> whares if you make one of these products.  If nothing more than 
> produce those nice tree killing reports that the client's management 
> likes to see.

The frightening thing is that there are a large number of self-proclaimed
expert IT security consultants out there who use these tools and haven't a
clue. They produce all sorts of weird and wonderful reports and conclusions
which either scare the bejabers out of their customers, or give little
insight as to the status of their networks' security.

The optimum is for the right tools for the right job - and the right
person/company for the job... Problem is, which tools and which people do
you trust? Sounds like the subject of certification and accreditation comes
back into play...

Regards

Christopher


----------------------------------------------------------------------
Christopher A. Nicholls
----------------------------------------------------------------------
Softway Pty Ltd  ACN: 002 726 641 
Canberra Branch Office: Suite 1.3, Dickson Park Professional Centre
151 Cowper Street, Dickson  ACT  2602
PO Box 923,  Dickson  ACT  2602
Ph:    +61 2 6257 0666  
Fax:  +61 2 6257 0665   E-mail: chrisn () softway com au
Mob: 0411 454 755       WWW:    http://www.softway.com.au
---------------------------------------------------------------------------