Title: “Using Automated Penetration Testing Products to enhance client assessments”
Speaker: Alex Horan
Date: September 8th, 2009
Location: Amsterdam, NL
Abstract:
When performing a Penetration Test as a service the value to the customer is the technical expertise of the Penetration Tester to not lonely find issues that could impact the integrity of the environment/organization being tested but also their ability to clearly communicate the risks present, potential impact of the risk and possible mitigations for the risk. A Penetration Test that is being performed as a service has a restricted window of time to assess the target, as such it is important that the tester spend the majority of their time on the more complex and technical aspects of the assessment and minimal time with routine and mundane tasks. By introducing commercial grade automation to the Penetration Tests the assessor is able to maximize the time spent on the complex elements of the Penetration Test that cannot be automated while being confident they have not compromised the breadth of their test. In this technical presentation attendees will see how they can leverage IMPACT Professional to automate their Network, Client Side and Web Application Penetration Tests.
