Home ›

scanner monkey

Application security beyond the scanner monkey November 13

in

Matt Fisher of Piscis Security gave a discussion about security beyond the "scanner monkey" phase. Scanner monkeys being people who run a scanner tool, get the output, and think they are done with a vulnerability assessment. There are more and more scanners - commercial, proprietary, and open source - and yet they are no longer good enough.

  • The scanners only start the process, they don't end it.
  • The person running the scanner is likely not talented enough to configure it properly.
Syndicate content