Experten aus dem binsec-Universum
The typical conference, university lecture or IT security training: someone stands up front with a prepared PowerPoint presentation and has lost the attention of their audience after 5 minutes. The hallmark of a frontal lecture? One person talks, the rest…
In the thesis " The Protective Potential of Antivirus Programs ", written to earn the academic degree Bachelor of Science (B.Sc.), Dominik Sauer shows the limits of current antivirus programs. In it, he developed a generic methodology for bypassing antivirus…
Recently, during a consulting meeting, I was asked whether you are given a guarantee after a penetration test that the tested application is absolutely secure. From a customer's point of view that question is perfectly understandable. Anyone who spends anything up to several thousand…
On 13 October 2015 I will be speaking in the evening at the Technische Hochschule Mittelhessen as part of the lecture series of the Kolloquium Wirtschaftsinformatik (Business Informatics Colloquium) on the topic " Business vs. Information Security ": potential for conflict, challenges, misunderstandings and…
How do you learn to lead people? Straight into the deep end! Maybe you first read up on the various theories of staff leadership. Or you ground yourself in the theory during your degree. Or you have a particularly generous employer who sends you on a seminar…
For a short time I studied physics at Goethe University Frankfurt am Main, then completed a degree in business informatics at the University of Applied Sciences Gießen-Friedberg (today Technische Hochschule Mittelhessen) and afterwards did my master's in security…
The cost of a penetration test primarily depends on two factors: the effort involved and the day rate. The duration of a penetration test depends on the size and complexity of an application or an IT infrastructure. As a rule, there are no blanket estimates…
On July I wrote a blog post about the modified Requirement 6.6 in PCI DSS 3.0 . I am not going into the details again, it’s sufficient to say that the new standard allows to operate a WAF in monitoring only mode without blocking requests: That was a very strange change in PCI…
Problem Driven Project Management is a modern alternative to agile project management methods. While the waterfall model still requires everything to be planned through from the top down, and even agile methods still require iterative planning, the point of planning simply falls away in…
I have already been asked several times how you actually become a penetration tester and which approach I can recommend for it. There is neither a vocational training specialised in it nor a degree programme specialised in it. I would like to approach the answer from the reverse end…