OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: [PEN-TEST] PEN TEST Price list
From: Erick Arturo Perez Huemer (eperezGRUPOTSLC.COM)
Date: Mon Oct 23 2000 - 12:59:00 CDT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This might sound silly but we are trying to expand into the PENTEST
area, a lillte more deeper..So we reached price issue.

Is there any agreed range of price to charge for PENTESTS according
to Operating Systems and/or network equipment?

Any resource I can read about?

Many thanks in advance,

Erick A. Perez H.
Asesor de Seguridad Informatica
Grupo TSLC International S.A.
Tel. 223-8327 / Fax 214-9209
email: eperezgrupotslc.com

- -----Mensaje original-----
De: Penetration Testers [mailto:PEN-TESTSECURITYFOCUS.COM]En nombre
de
McGann, J
Enviado el: sábado 21 de octubre de 2000 13:52
Para: PEN-TESTSECURITYFOCUS.COM
Asunto: Re: [PEN-TEST] Datacenter Wiring

At 10:14 AM 10/21/2000 -0400, Drew Simonis wrote:
>Tom Litney wrote:
> >
> > >
> > > This is a topic that I fear many of us do not take seriously
> > > because
> it is
> > > not a "geek" topic - physical security.
> > .....
> > > stonewall
>
>(...)
>
> >
> > My initial question was attempting to solicit an opinion from
> > you, the experts. Disregarding for a minute the hardware on
> > either side of the wire and whether all traffic should be
> > encrypted questions but focusing in on just the physical wire
> > security. You have been approached by one of your clients who is
> > building a datacenter. They are asking your opinion on how they
> > should wire it to provide the best security against
> penetration. Which
> > method would you recommend? Are you a wire walker or a wire
> > hider? And why?
>
>
>I suppose I am a wire hider. I think a nice steel conduit is a heck
>of a lot better than any other solution Ive heard. And get this
>twist I've heard about: presurizing the conduit. Charge that pipe
>up with an inert gas, and if the conduit is broken, for any reason,
>an alarm is generated. I can't think of a more secure way to
>protect my cables, can you?

There are some other solutions out there: for example the NSA/DOD
approved
Cylink Corporation product that puts a fiberoptic wire across the
cable
pipe. When the pipe is knocked too hard or cut into, the vibration
is
detected by the FO wire and an alarm sounds. Similar to Drew's
pressurization suggestion above. The alarms can be set to ignore
vibrations up to a certain level so as not to create too many false
alarms. This is a great solution for situations where you are
running wire
under ground between buildings on a business campus.

Peace, Jamie

HR
Fiderus Strategic Security & Privacy - Security for the Masses
|| HQ: 919-852-1900 || Cary: 919-654-6837 || TollFree: 866-FIDERUS ||
|| Mobile: 757-535-6605 || Pager: 866-787-1001 -
|| 8667871001skytel.com || Fiderus Computer Emergency Hotline #
|| 1-877-595-8491||
|| <jmcgannfiderus.com> || <shadowjcmmindspring.com> ||
"Energy & persistence conquer all things" -Benjamin Franklin

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.3

iQA/AwUBOfR8WWcbGreM5JWXEQJypwCfTBlvjP7V2dATZVITn4TqOwjj8FIAoKl9
Nb3QS685zHe0oBwWCmabLAK0
=W4EM
-----END PGP SIGNATURE-----