Penetration Testing mailing list archives

Re: [PEN-TEST] Cost of Penetration Testing


From: Deri Jones <Deri.Jones () NTA-MONITOR COM>
Date: Tue, 12 Sep 2000 16:56:07 +0100

At 08:55 12/09/00 -0500, Jim Miller wrote:
Curious what a penetration test would cost.  Since the scope can be
quite different in each perception, I'll try to define the test:

An Internet site with 3 URLs, one of which is secured by password access,
to prevent private banking information from becoming public.  There are 3
servers, all of which are secured via firewalls.

Is that one Internet connection, and one 'security perimeter' with all
servers behind it.

Or more than 1 Internet connection?

And/Or more than 1 security perimeters?

(because 3 systems behind a single common gateway/perimeter is less to test
than 3 seperate gateway/perimeters, with one server behind each.)

Deri Jones
NTA Monitor


Current thread: