Penetration Testing mailing list archives
RE: Testing Help
From: "Mitchell, Chris (GE Indust, ConsInd, consultant)" <chris.mitchell () ge com>
Date: Mon, 30 Apr 2007 13:05:40 -0400
The pen-testing profession can cover such a broad array of domains. We might be able to better ascertain what might be a more advisable solution if we knew what kind of audit you were looking to perform. There are any compliance standards that may be required by the requestor. SOX Audits, PCI (Payment Card Industry,) etc. Perhaps you could describe what the surface area for potential attacks should look like? Is this in regard to an Internet Facing Web Application? The two references you provided appear to be pretty broad however, I will admit, I could have spent more time researching them. Hope I can help, Chris -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Lisa L Cooper Sent: Monday, April 30, 2007 11:16 AM To: pen-test () securityfocus com Subject: Testing Help I'm new to the list so please bare with me. I would however like some advice on the following issue. An audit request has prompted us to investigate network pen testing. We are looking at the following options. 1. Outside vendors such as Network Armor, and Rapid 7. Have any of you used these and if so, which one, and were you satisfied? 2. We have Nessus, but as I'm sure you guys know the reporting is awful. Do any of you know if anyone has written a good program to help out with this situation? Lisa L. Cooper, lisa.cooper () louisville edu University of Louisville Information Technology Enterprise Network Security Miller IT Bldg, Room 109 Louisville, KY 40292 ------------------------------------------------------------------------ This List Sponsored by: Cenzic Are you using SPI, Watchfire or WhiteHat? Consider getting clear vision with Cenzic See HOW Now with our 20/20 program! http://www.cenzic.com/c/2020 ------------------------------------------------------------------------ ------------------------------------------------------------------------ This List Sponsored by: Cenzic Are you using SPI, Watchfire or WhiteHat? Consider getting clear vision with Cenzic See HOW Now with our 20/20 program! http://www.cenzic.com/c/2020 ------------------------------------------------------------------------
Current thread:
- Testing Help Lisa L Cooper (Apr 30)
- Re: Testing Help Matt (Apr 30)
- RE: Testing Help Mitchell, Chris (GE Indust, ConsInd, consultant) (Apr 30)
- Message not available
- Re: Testing Help David Gadoury (Apr 30)
- RE: Testing Help Sohail Sarwar (Apr 30)
- Re: Testing Help David Gadoury (Apr 30)