I am, I will admit, sadly inadequate when it comes to security. I'm not a hacker (in either the white hat or black hat sense) and never have been, and have little exposure to the rigors of security testing, as any system administrator who's worked with me can attest. So I'm looking forward to the ISECOM Open Source Security Testing Methodology Manual. "As a professional standard, it includes the rules of engagement, the ethics for the professional tester, the legalities of security testing, and a comprehensive set of the tests themselves." We'll see.
Comments