Penetration Testing mailing list archives

New Article on SecurityFocus


From: "Erin Carroll" <amoeba () amoebazone com>
Date: Tue, 29 Nov 2005 18:14:49 -0800

The following columnist commentary was published on SecurityFocus today:

Regaining control
by Kelly Martin
2005-11-29

Securing endpoint systems by locking them down using complex software brings
back memories of another era, where business computers were once used for
business applications only - and businesses retained control over their
assets and data.

http://www.securityfocus.com/columnists/372

---
I've rarely had the opportunity to do pen-tests where end-point systems are
part of the mix (mostly done server/network infrastructure stuff) but I'm
sure some list members have run into wide-open endpoint boxes within client
sites. Is locking things down tight a viable solution? How do you balance
usability and development-type environments against the security concerns
these boxes represent?

--
Erin Carroll
"Do Not Taunt Happy-Fun Ball" 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.362 / Virus Database: 267.13.10/186 - Release Date: 11/29/2005
 


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: