Making Penetration Tests Actually Useful
summary
Covers designing penetration tests so they lead to actual security improvements rather than just demonstrating vulnerabilities. Focuses on changing how pen tests are scoped, executed and reported to drive remediation and organizational security gains.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:40Expectations
- 1:02Waste of Money
- 1:45Target Hack
- 3:41Security Professionals
- 4:55Games of Gotchas
- 7:26System Control
- 12:50Proactive Data Collection
- 14:53Detection
- 18:09Conclusions
related talks
33mWorking with penetration testers as a developer
52mApplication Penetration Testing – DOs and DON‘Ts
19mPenetration Testing
50mThe Practicalities of Pen Testing at Scale
56mBuilding An Effective Application Penetration Testing Team
44mApplication Security: Everything we know is wrong
28mBeyond Penetration Testing: Developing a Defensive Cyber-Workforce
50mA CISO's Best Friend: The Pentester