The Network Security. Org

Why Wait For Hackers?

Testing new applications for security weaknesses is a process that is often performed from the outside-in. Security administrators and/or Q/A teams receive applications that are already in their near-final form for testing, and they proceed to bombard them with various forms of hack attempts--either manually or systematically via specialized tools--in order to determine their vulnerabilities. Or, even worse, the product could be released with no such security testing done at all; relegating the vulnerability testing of the application to the actual attackers waiting to exploit their weaknesses.

Needless to say, should vulnerabilities be discovered at this phase it's too late: The barbarians have already breached the fortress. And even if you do have in-house black-box testing, vulnerabilities found at such a late stage in the development of the product can be costly; both in terms of the effort needed to correct the issues and the inevitable product delays. Why Wait For Hackers?

More News

• Apple releases another mega-patch for Mac OS X
  



• Security flaw in smart cards poses risk for transit, building access
  



• Free TrojanProof Password Tool Released for Windows
  



• Security scans with OpenVAS
  



• Do ISPs pose a bigger online privacy threat than Google
  



• HTTPS Cookie-Hijacking Tool CookieMonster Gobbles Personal Data
  



• Anatomy of a botnet
  



• Microsoft patches 8 critical bugs in Windows, Office
  



• Virtualization users should expect more attacks
  



• Threat From DNS Bug Is not Over, Experts Say
  



• Website infection rate triples
  



• How to Use Honeypots to Improve Your Network Security
  



• Microsoft Patch Tuesday Targets 26 Application Flaws
  



• SSL VPNs might not be as secure as you think
  



• 8 tips to filter spam effectively
  



• Onus on IP address owner to prove innocence
  



• How to install an SSH Server in Windows Server 2008.
  



• Several vulnerabilities closed in the Linux kernel
  



• 8 Best Practices for Encryption Key Management and Data Security
  



• Free Honeypot Client Could Sting Malware