Re: whitehat to test a security config

2 msg	speaking about ssl problems...
3 msg	problems with libssl security update
3 msg	Is there a known rpc.statd buffer overflow?
2 msg	Current-stable trouble getting through http proxy
3 msg	package name case in DSAs ?
3 msg	Looking for PAM module
1 msg	Re: [SECURITY] [DSA 888-1] New OpenSSL packages...
1 msg	clamav 0.84-2.sarge.5 in stable-proposed-update...
1 msg	Bug#337624: All local users can view the webcal...
1 msg	Re: [SECURITY] [DSA 883-1] New thttpd packages ...
2 msg	Antispam
1 msg	Re: [SECURITY] [DSA 882-1] New OpenSSL packages...
1 msg	Re: [SECURITY] [DSA 881-1] New OpenSSL 0.9.6 pa...
4 msg	eth interface with no IP
1 msg	volunteer computer-geek to help us for FREE? pl...
6 msg	clamav and magic byte
1 msg	Patrina Graham?
4 msg	Re: whitehat
4 msg	Re: [SECURITY] [DSA 879-1] New gallery packages...

whitehat to test a security config
\ alex black (1 Nov 2005)
. \ Alvin Oga (1 Nov 2005)
. . \ Harry (1 Nov 2005)
. . . \ Alvin Oga (1 Nov 2005)
. . . \ Rob Burgers (2 Nov 2005)
. \ Bernd Eckenfels (2 Nov 2005)
. . \ Javier Fernández-Sanguino Peńa (4 Nov 2005)
. . . \ Bernd Eckenfels (4 Nov 2005)

Subject:	Re: whitehat to test a security config
Group:	Debian-security
From:	Bernd Eckenfels
Date:	4 Nov 2005

On Fri, Nov 04, 2005 at 01:19:36AM +0100, Javier Fernández-Sanguino Peńa wrote:
> But also somewhat wrong: a black-box test is much cheaper than a full
> security audit of a system.

Well, I guess you mean "port scan". A Tiger Team who helps your security is
most often quite expensive cause it takes a lot of attacks - including
on-site social engeneering.

To run nessus you do not need to spend any money, thats right.

Gruss
Bernd

--
To UNSUBSCRIBE, email to debian-security-REQUEST
with a subject of "unsubscribe". Trouble? Contact listmaster