From: Mitchell, Chris (GE Indust, ConsInd, consultant) (chris.mitchell@ge.com)
Date: Mon Apr 30 2007 - 13:05:40 EDT
The pen-testing profession can cover such a broad array of domains. We
might be able to better ascertain what might be a more advisable
solution if we knew what kind of audit you were looking to perform.
There are any compliance standards that may be required by the
requestor. SOX Audits, PCI (Payment Card Industry,) etc.
Perhaps you could describe what the surface area for potential attacks
should look like? Is this in regard to an Internet Facing Web
Application? The two references you provided appear to be pretty broad
however, I will admit, I could have spent more time researching them.
Hope I can help,
Chris
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Lisa L Cooper
Sent: Monday, April 30, 2007 11:16 AM
To: pen-test@securityfocus.com
Subject: Testing Help
I'm new to the list so please bare with me. I would however like some
advice on the following issue. An audit request has prompted us to
investigate network pen testing. We are looking at the following
options.
1. Outside vendors such as Network Armor, and Rapid 7. Have any of you
used these and if so, which one, and were you satisfied?
2. We have Nessus, but as I'm sure you guys know the reporting is awful.
Do any of you know if anyone has written a good program to help out with
this situation?
Lisa L. Cooper, lisa.cooper@louisville.edu University of Louisville
Information Technology Enterprise Network Security Miller IT Bldg, Room
109 Louisville, KY 40292
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic See HOW Now with our 20/20
program!
http://www.cenzic.com/c/2020
------------------------------------------------------------------------
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!
http://www.cenzic.com/c/2020
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:45 EDT