Why is digital pentesting not enough

Posted on 30. Jun, 2011 by Reza Rafati Tag: Cybersecurity, Digital, magazine, pentesting
  • Share this
  • Pick a random article for me

Physical penetration testing plays an important role in assuring a company that the security policies are properly enforced and that the security awareness of the employees is on the appropriate level. In physical penetration tests the tester physically enters restricted locations and directly interacts with the employees to convince them to break a policy or provide credentials. The physical access and the direct interaction with the employees complicate the execution of the tests and have ethical, legal and safety implications.

PenTest Magazine  When penetration testing is mentioned, the first thing management thinks of is trained security professionals behind their computers, hundreds of kilometers away, trying to penetrate the network of the company. And, in most cases they will be right. However, digital penetration tests are only one part of the whole story.

Read the whole story here 


Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
CAPTCHA
This is to prevent spammers. Authenticated users can skip the CAPTCHA security measure.
Image CAPTCHA
Enter the characters shown in the image.

Memorial

Knowledge is suppressed because of its power to change.
Online since 30-jan-2010 

 

Security tips #1

Choosing and Protecting Passwords
Coordinating Virus and Spyware Defense
Cyber Security Tip - Cyber Security
Debunking Some Common Cyber Myths
Good Security Habits
Guidelines for Publishing Information Online
Understanding Anti-Virus Software
Understanding Firewalls
Understanding ISPs

Interesting links

Study 4 Cyberwar

Dutch cyber warfare community

Aurora Cyberconflict Research Group

Sec-recon.blogspot.se

 

 

Donate

Donate & Help us out. Server(Drunk cost money. 


 

Security tips #2

Avoiding Social Engineering and Phishing Attacks
Dealing with Cyberbullies
Preventing and Responding to Identity Theft
Recognizing and Avoiding Spyware
Recovering from Viruses, Worms, and Trojan Horses
Understanding Denial-of-Service Attacks
Understanding Hidden Threats: Corrupted SoftwareFiles
Understanding Hidden Threats: Rootkits and Botnets

Who's new

  • ciberprov
  • michael.nguyen
  • mornjinfeng
  • aniketdaptardar
  • hadriker
  • Alanw

Security vids #1

Team Cymru Research NFP is a specialized Internet security research firm and 501(c)3 non-profit dedicated to making the Internet more secure. Team Cymru helps organizations identify and eradicate problems in their networks, providing insight that improves lives.

Team Cymru the video series 1 to 10
Team Cymru the video series 11 to 20
Team Cymru the video series 21 to 30
Team Cymru the video series 31 to 40
Team Cymru the video series 41 to 50
Team Cymru the video series 51 to 60

CWZ Books

Who's online

There are currently 0 users and 16 guests online.

Security vids #2

The Center for Education and Research in Information Assurance and Security (CERIAS) is currently viewed as one of the world’s leading centers for research and education in areas of information security that are crucial to the protection of critical computing and communication infrastructure.

CERIAS is unique among such national centers in its multidisciplinary approach to the problems, ranging from purely technical issues (e.g., intrusion detection, network security, etc) to ethical, legal, educational, communicational, linguistic, and economic issues, and the subtle interactions and dependencies among them.

CERIAS Security: Attribute-Based Access Control
CERIAS Security: Information Flow Analysis in Security Enhanced Linux
CERIAS Security: Towards Mining Syslog Data
Weapons of Mass Disruption Gallery Launch: Reitinger Remarks
Weapons of Mass Disruption: Mike McConnell on The Nightmare Scenario

Security vids #3

Bruce Schneier on Cyber War and Cyber Crime Lulzsec: LulzPirate and his path of destruction
Britain's defence pact no threat to NATO's future NATO - Six Colours: War in cyberspace
Cloud Computing Security & Hosted Email Archive Security Marcus Ranum on cyberwar, critical infrastructure protection
Cyber attack or media hack? BlueHat v10: Cyber [Crime/War] -- Connecting the Dots
Cyber warfare, chess and denial-of-service attacks Preparing for Cyber War: Strategy and Force Posture in the Information-Centric World
Cybersecurity and a government shutdown Ralph Langner: Cracking Stuxnet, a 21st-century cyber weapon
DefCon 15 - T112 - No-Tech Hacking SCADA Honeypot
About CyberWar, Deterrence, and Espionage SNAP: Network analysis and graph mining library for massive networks
Image-Based Authentication for Password Strengthening Symantec Guide to Scary Internet series 1 to 7
Insights from the NISA International SCADA Security Forum conference Stealing Facebook Login using Social Engineering Toolkit
Why is digital pentesting not enough Ten Commandments of IT-Security for Web 2.0 Startups
Iran and the Internet: A Conversation With Ariel Silverstone The fundamental failure of endpoint security
Iran, Scott Brown and Corporate Espionage The future of the security Industry by Bruce Schneier
John Bumgarner on Cyber warfare [27C3] (en) Smartphones SMS-o-Death #infosec
John Markoff on Stuxnet Shadow Government



#Cyberwar