Penetration Testing and Ethical Hacking

MUST READ How security audits, vulnerability assessments and penetration tests differ EXPERT ANSWER - A lot of people use the words security audit, vulnerability assessment and penetration test interchangeably. Can you explain the differences between them so I'll know which term to use at the right time? Five ways to simplify the vulnerability management lifecycle TIP - Learn how to quickly and accurately quantify your exposure, communicate that exposure and deploy resources to remediate. Crash course: Vulnerability management FEATURED TOPIC - Is vulnerability management a measurable and proactive process in your organization? Attend our on-demand webcast, and learn new tactics for managing the vulnerability lifecycle.

NEWS: 1 - 3 of 27

	IBM's Watchfire halts network research, focuses on Web apps SearchSecurity.com | 26 Mar 2008 INTERVIEW - Watchfire researchers turned over their network and host-based research to IBM's Internet Security Systems (ISS) division. Under IBM, Watchfire will focus on Web 2.0 threats.

	Core Security selects former Sophos exec as new CEO SearchSecurity.com | 10 Mar 2008 ARTICLE - Core Security Technologies is selecting Mark Hatton as its new CEO to boost interest in its penetration testing products.

	RE:trace framework aids in OS X, Unix flaw discovery SearchSecurity.com | 21 Feb 2008 ARTICLE - The new Ruby-based framework gives security professionals and reverse engineers the ability to find flaws in both the stack and the heap

	VIEW ALL NEWS ON PENETRATION TESTING AND ETHICAL HACKING

EXPERT TECHNICAL ADVICE: 1 - 3 of 21

PENETRATION TESTING AND ETHICAL HACKING EXPERTS
			Michael Cobb Founder and Managing Director, Cobweb Applications Ltd. ASK A QUESTION

	Screencast: Penetration testing with Metasploit 29 Apr 2008 TIP - Peter Giannoulis of http://theacademy.ca demonstrates how Metasploit can be used to test commercial and custom-made applications, servers and operating systems.

	Google hacking exposes a world of security flaws 20 Mar 2008 TIP - In this tip, contributor Scott Sidel examines Goolag, a open source security tool that assists security pros in finding flaws in websites through Google hacking.

	Getting started on a career in penetration testing 20 Dec 2007 EXPERT ANSWER - In this expert response, Mike Rothman offers insight on how to start a career in penetration testing.

	VIEW ALL EXPERT TECHNICAL ADVICE ON PENETRATION TESTING AND ETHICAL HACKING

REFERENCE & LEARNING: 1 - 3 of 7

	Information security book excerpts and reviews SearchSecurity.com | 20 Sep 2006 INFORMATION SECURITY BOOKSHELF - Visit the Information Security Bookshelf for book reviews and free chapter downloads.

	Screencast: Google hacking, infosec style SearchSecurity.com | 28 Aug 2007 SCREENCAST - In this exclusive screencast step-by-step demo, Tom Bowers explains how to ensure an organization's intellectual property doesn't fall into the wrong hands.

	Quiz: What's your infosec IQ? SearchSecurity.com | 13 Oct 2005 SECURITY QUIZ - We've collected our toughest questions to see how well you stand up to a challenge. Put your knowledge to the test and let us know how you do.

	VIEW ALL REFERENCE & LEARNING ON PENETRATION TESTING AND ETHICAL HACKING

MAGAZINE CONTENT (free subscription required): 1 - 3 of 11

	Viewpoint Information Security Magazine | 01 May 2007 HOT PICK & PRODUCT REVIEWS -

	Emerging Technologies Information Security Magazine | 01 Apr 2007 FEATURES - 2007 Readers' Choice Awards Innovative and effective solutions to tough security problems

	Face-Off Information Security Magazine | 01 Mar 2007 COLUMNS - Pen tests identify your organization's weaknesses. Do you really want to document all the ways your network is insecure?

	VIEW ALL MAGAZINE CONTENT ON PENETRATION TESTING AND ETHICAL HACKING

WEBCASTS: 1 - 1 of 1

	Five must-have hacker tools for the security admin - Expert Webcast VIEW WEBCAST PREMIERED:   10 NOV 2004, 12:00 EST (17:00, GMT) SUMMARY:   The security administrator with the intent to secure his organization's network can benefit from the very same tools used by his foes to wreak havoc. Learn how in this webcast.

	VIEW ALL WEBCASTS ON PENETRATION TESTING AND ETHICAL HACKING

DEFINITIONS: 1 - 3 of 8

	Cyber Storm 15 Feb 2006 WORD - Cyber Storm is the name of a simulated attack exercise conducted by the U.S. Department of Homeland Security (DHS) between February 6-10, 2006 to evaluate the performance of various public and private organizations. The ...

	honeynet 17 Aug 2004 WORD - A honeynet is a network set up with intentional vulnerabilities; its purpose is to invite attack, so that an attacker's activities and methods can be studied and that information used to increase network security. A honeynet ...

	ethical hacker 28 Sep 2003 WORD - An ethical hacker is a computer and network expert who attacks a security system on behalf of its owners, seeking vulnerabilities that a malicious hacker could exploit. To test a security system, ethical hackers use the same ...

	VIEW ALL DEFINITIONS ON PENETRATION TESTING AND ETHICAL HACKING

	SEE ALSO - Topics Related to Penetration Testing and Ethical Hacking:  Vulnerability Assessment, Patch Management, Configuration Management