RE: Research on penetration testing?

["Rishi Pande" <rpande () vt edu>]

I do not know if you would like your research to be more technically
oriented, but here is an idea for research on the soft-side of pen-testing.
In particular, the costs of pen-tests and estimates of average cost savings
from a pen-test would be useful research. 
Good luck!
        Rishi 


-----Original Message-----
From: H Carvey [mailto:keydet89 () yahoo com] 
Sent: Monday, December 13, 2004 12:57 PM
To: pen-test () securityfocus com
Subject: Re: Research on penetration testing?

In-Reply-To: <200412131435.10149.gramill () tin it>

Marco,

> i think..
> the new steganography tecnologies are very interesting.
> =46or example the session level steganography and the object steganography.
> you can find more here www.rrsecurity.info

I'm not sure I follow your reasoning here...could you elaborate on how
steganography relates to pen testing?  I would think that research in this
area would be more suitable for the Forensics list.

I'd greatly appreciate any input you might have...

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com