I do not know if you would like your research to be more technically
oriented, but here is an idea for research on the soft-side of pen-testing.
In particular, the costs of pen-tests and estimates of average cost savings
from a pen-test would be useful research.
Good luck!
Rishi

-----Original Message-----
From: H Carvey [mailto:keydet89 (at) yahoo (dot) com [email concealed]]
Sent: Monday, December 13, 2004 12:57 PM
To: pen-test (at) securityfocus (dot) com [email concealed]
Subject: Re: Research on penetration testing?

In-Reply-To: <200412131435.10149.gramill (at) tin (dot) it [email concealed]>

Marco,

>i think..
>the new steganography tecnologies are very interesting.
>=46or example the session level steganography and the object steganography.
>you can find more here www.rrsecurity.info

I'm not sure I follow your reasoning here...could you elaborate on how
steganography relates to pen testing? I would think that research in this
area would be more suitable for the Forensics list.

I'd greatly appreciate any input you might have...

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com

[ reply ]