Bruce Schneier and Marcus Ranum on Pen Testing

Viewing 2 reply threads
  • Author
    Posts
    • #1174
      CadillacGolfer
      Participant

      Anyone see this months issue of Info Sec magazine? 

      Bruce Schneier and Marcus Ranum did a face off piece on Penetration testing.  Not exactly a glowing recommendation of the profession.  At some level, I have to agree with what they say though.

    • #11900
      oleDB
      Participant

      Here is direct link

      http://informationsecurity.techtarget.com/magItem/0,291266,sid42_gci1245619,00.html

      After reading it, its pretty obvious neither of them are big proponents of pen testing. It makes sense on some level, if your not going to do anything with the report, why bother spending the money. The only reason is for it then would be compliance issues. I personally think pen testing does provide some value, but the market is flooded with below average pen testers which waters down the effectiveness of it. Also, I think simply coming in and reviewing and revising IT processes like patching, best practices, and IR policy is more effective then a network pen test in the long run.

    • #11901
      CadillacGolfer
      Participant

      I agree

Viewing 2 reply threads
  • You must be logged in to reply to this topic.

Copyright ©2020 Caendra, Inc.

Contact Us

Thoughts, suggestions, issues? Send us an email, and we'll get back to you.

Sending

Sign in with Caendra

Forgot password?Sign up

Forgot your details?