SANS Network Security 2008

Put up my first blog post over at the Trusted Signal Blog.

I saw that SANS' Network Security 2008 in Las Vegas is going to have what's sure to be an awesome keynote by Ed Skoudis and Kevin Johnson on combining traditional and web application penetration testing.

As someone who has done a fair amount of web application pen testing over the years and virtually no traditional penetration testing, I can see how a web application pen test could be used to aid a traditional pen test, but I'd love to hear Skoudis' and Johnson's expert ideas on the subject.