January 2010 - WLUG - wlug.mailman3.com

Re: [Wlug] Penetration Tester

by Tal Cohen

Not to mention, it is a requirment for for certain compliance that I am trying to meet :) Tal ----- Original Message ----- From: "Gregory Boyce" <gregory.boyce(a)gmail.com> To: "Worcester Linux Users Group" <wlug(a)mail.wlug.org> Sent: Monday, January 18, 2010 3:47 PM Subject: Re: [Wlug] Penetration Tester >I agree with most of what you're saying except I thinking you're > mixing up vulnerability scanning with pen testing. A good pen tester > will actually demonstrate the vulnerability and can find new issues in > your custom web app code. > > The one benefit of pen testing would be convincing decision makers > that the steps you outlined are necessary. > > On Jan 18, 2010, at 12:32 PM, Nick Nassar <nassar(a)alum.wpi.edu> wrote: > >> Don't bother. It's security theater. >> >> It easy to run automated tests, but the chance it will actually catch >> something that you wouldn't know about by reading the proper security >> mailing lists is negligible. >> >> These days most malware gets in through end users doing stupid things. >> China hacked Google with a phishing attack. There's no completely >> technical solution for that. Educate users as best you can. If >> there's >> sensitive data on your network, make sure only people who need access >> have access. >> >> Assume that your network will be compromised. Have a strategy to >> restore things quickly when that happens. >> >> >> >> Tal Cohen <wlug(a)cohen123.com> wrote: >> >>> I need a penetration tester (individual or firm) to run some tests >>> against my >>> network. >>> >>> Anyone have any recommendations they care to share? >>> >>> Thanks! >>> >>> Tal >>> >>> _______________________________________________ >>> Wlug mailing list >>> Wlug(a)mail.wlug.org >>> http://mail.wlug.org/mailman/listinfo/wlug >> _______________________________________________ >> Wlug mailing list >> Wlug(a)mail.wlug.org >> http://mail.wlug.org/mailman/listinfo/wlug > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 18, 2010

Re: [Wlug] Penetration Tester

by Gregory Boyce

I agree with most of what you're saying except I thinking you're mixing up vulnerability scanning with pen testing. A good pen tester will actually demonstrate the vulnerability and can find new issues in your custom web app code. The one benefit of pen testing would be convincing decision makers that the steps you outlined are necessary. On Jan 18, 2010, at 12:32 PM, Nick Nassar <nassar(a)alum.wpi.edu> wrote: > Don't bother. It's security theater. > > It easy to run automated tests, but the chance it will actually catch > something that you wouldn't know about by reading the proper security > mailing lists is negligible. > > These days most malware gets in through end users doing stupid things. > China hacked Google with a phishing attack. There's no completely > technical solution for that. Educate users as best you can. If > there's > sensitive data on your network, make sure only people who need access > have access. > > Assume that your network will be compromised. Have a strategy to > restore things quickly when that happens. > > > > Tal Cohen <wlug(a)cohen123.com> wrote: > >> I need a penetration tester (individual or firm) to run some tests >> against my >> network. >> >> Anyone have any recommendations they care to share? >> >> Thanks! >> >> Tal >> >> _______________________________________________ >> Wlug mailing list >> Wlug(a)mail.wlug.org >> http://mail.wlug.org/mailman/listinfo/wlug > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 18, 2010

Re: [Wlug] Penetration Tester

by Nick Nassar

Don't bother. It's security theater. It easy to run automated tests, but the chance it will actually catch something that you wouldn't know about by reading the proper security mailing lists is negligible. These days most malware gets in through end users doing stupid things. China hacked Google with a phishing attack. There's no completely technical solution for that. Educate users as best you can. If there's sensitive data on your network, make sure only people who need access have access. Assume that your network will be compromised. Have a strategy to restore things quickly when that happens. Tal Cohen <wlug(a)cohen123.com> wrote: > I need a penetration tester (individual or firm) to run some tests against my > network. > > Anyone have any recommendations they care to share? > > Thanks! > > Tal > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 18, 2010

Re: [Wlug] Penetration Tester

by Gregory Boyce

Never hired one myself, but I do know a number of them. Locally Netragard or Rapid 7 certainly have smart people working there. On Jan 15, 2010, at 4:07 PM, "Tal Cohen" <wlug(a)cohen123.com> wrote: > Thanks guys! > > I already run vulnerability scans. I need an actual pen-tester at > this point. > > Tal > ----- Original Message ----- > From: Gregory Boyce > To: Worcester Linux Users Group > Cc: Worcester Linux Users Group > Sent: Friday, January 15, 2010 4:03 PM > Subject: Re: [Wlug] Penetration Tester > > On Jan 15, 2010, at 3:48 PM, Karl Hiramoto <karl(a)hiramoto.org> wrote: > >> On 15/01/2010 21:28, Tal Cohen wrote: >>> >>> I need a penetration tester (individual or firm) to run some tests >>> against my network. >>> >>> Anyone have any recommendations they care to share? >> >> 1st step would be to run nessus (http://www.nessus.org/nessus/) >> and nmap (http://nmap.org/) on your network > >> > > If you're talking about an external network you can also look at > Qualys's free scanning. > > http://www.qualys.com/products/trials > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 15, 2010

Re: [Wlug] Penetration Tester

by Tal Cohen

Thanks guys! I already run vulnerability scans. I need an actual pen-tester at this point. Tal ----- Original Message ----- From: Gregory Boyce To: Worcester Linux Users Group Cc: Worcester Linux Users Group Sent: Friday, January 15, 2010 4:03 PM Subject: Re: [Wlug] Penetration Tester On Jan 15, 2010, at 3:48 PM, Karl Hiramoto <karl(a)hiramoto.org> wrote: On 15/01/2010 21:28, Tal Cohen wrote: I need a penetration tester (individual or firm) to run some tests against my network. Anyone have any recommendations they care to share? 1st step would be to run nessus (http://www.nessus.org/nessus/) and nmap (http://nmap.org/) on your network If you're talking about an external network you can also look at Qualys's free scanning. http://www.qualys.com/products/trials ------------------------------------------------------------------------------ _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Jan. 15, 2010

Re: [Wlug] Penetration Tester

by Gregory Boyce

On Jan 15, 2010, at 3:48 PM, Karl Hiramoto <karl(a)hiramoto.org> wrote: > On 15/01/2010 21:28, Tal Cohen wrote: >> >> I need a penetration tester (individual or firm) to run some tests >> against my network. >> >> Anyone have any recommendations they care to share? > > 1st step would be to run nessus (http://www.nessus.org/nessus/) > and nmap (http://nmap.org/) on your network > If you're talking about an external network you can also look at Qualys's free scanning. http://www.qualys.com/products/trials

Jan. 15, 2010

Re: [Wlug] Penetration Tester

by Karl Hiramoto

On 15/01/2010 21:28, Tal Cohen wrote: > I need a penetration tester (individual or firm) to run some tests > against my network. > Anyone have any recommendations they care to share? 1st step would be to run nessus (http://www.nessus.org/nessus/) and nmap (http://nmap.org/) on your network

Jan. 15, 2010

Penetration Tester

by Tal Cohen

I need a penetration tester (individual or firm) to run some tests against my network. Anyone have any recommendations they care to share? Thanks! Tal

Jan. 15, 2010

Re: [Wlug] Up.Time

by Mike Peckar

This is a commercial software product I have not heard of, and I'm a specialist in enterprise management software. If you are looking for a great agentless app for systems, application and network management, check out opennms at http://www.opennms.org Free can be a great alternative to not, especially for SMBs, and agent-based apps require a lot of management overhead that smaller shops typically can't afford. Mike -----Original Message----- From: wlug-bounces(a)mail.wlug.org [mailto:wlug-bounces@mail.wlug.org] On Behalf Of Maurice Sent: Friday, January 15, 2010 10:05 PM To: Worcester Linux Users Group Subject: [Wlug] Up.Time Anyone using, or have used, Up.Time software to monitor their servers? If so, what do you think of the product line? http://www.uptimesoftware.com/ Thanks -- -Maurice Pelletier Child Development Services - Cumberland County 50 Depot Road Falmouth, ME 04105 207-781-8881 (voice) 207-781-8855 (fax) www.cds-cumberland.org "Linux -- it's not just for breakfast anymore..." -Moe _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Jan. 15, 2010

Re: [Wlug] Up.Time

by Randall Mason

No, never used it. When I was setting up server monitoring at my previous company, we used Oreon, which is now Centreon. They are an open source GUI on top of Nagios so that you don't have to do all of the horrible NAGIOS configuration. It looks fairly similar to this Up.Time product though. It made setting up NAGIOS so easy. Check them out. Randall Mason randall(a)mason.ch On Fri, Jan 15, 2010 at 2:04 PM, Maurice <mauricep(a)cds-cumberland.org>wrote: > Anyone using, or have used, Up.Time software to monitor their servers? > If so, what do you think of the product line? > > > http://www.uptimesoftware.com/ > > > > Thanks > > > -- > -Maurice Pelletier > Child Development Services - Cumberland County > 50 Depot Road > Falmouth, ME 04105 > 207-781-8881 (voice) > 207-781-8855 (fax) > > www.cds-cumberland.org > > > "Linux -- it's not just for breakfast anymore..." > -Moe > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Jan. 15, 2010