From: Christine Kronberg (seeker@shalla.de)
Date: Wed Dec 13 2006 - 14:30:34 EST
Davide,
> Skills do not relate to the time you need to do the test.
> Pen Test means "Try to get in and tell me what you can reach".
And then you tell the customer that you didn't accomplish a
thing because you didn't had a clue what to do and not enough
time to get the clue?!
Yes, time does relate to skills. Directly. My skills enable me
not only to perform the testing but read the results correctly
in a reasonable time to fire off the next proper set of tests.
> When you perform a pen test you must define:
> - Targets
> - (reasonably) goals
> - Timeframe within achieve these goals
> - Areas of the test (Internet, X.25, PSTN, Wi-fi/Bluetooth etc.): if you
> define these, you are probably limiting the "vision" of the test and the
> achievement of your goals
>
> You have to achieve these goals within a given timeframe.
>
> In this scenario, skills relate to the goals you reach.
100% agree. And there are times that I am not able to reach the
goals in the given time simply because I cannot do it while others
can. Because my set of skills simply do not match. So I tell my
customer to give the job to someone else.
Cheers,
Chris.
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:27 EDT