Tag: penetration testing

  • Why You Should Go Beyond The Typical Penetration Test

    This post was originally published on Forbes If you’ve ever run across a penetration test report, they usually look bleak. I should know; I’ve authored hundreds of them. By their very nature, they try to focus on the most egregious security issues within a system or network. Having an understanding of how an actual adversary […]

  • Seeing RED in your future? – Recap from DerbyCon 3.0

    Yes, I know, It’s been a while since I updated anything here. Work, life, etc… So here’s a quick update/recap on some of the latest: SecurityZone 2013 was an excellent experience. Always great to get back to Cali to meet who are now friends rather than just colleagues and conference organizers. I delivered the keynote […]

  • Post Brucon thoughts – guesstimates in an engineering field

    So, another epic Brucon has ended, and while everyone is getting their thoughts together again (the amount of super smart people I have had the pleasure to have conversations with is unimaginable), I wanted to post a quick recap. First things first – numbers. I’ve been working with the FAIR methodology quite a while now, […]