Tuesday, 26 June 2012

Are testers as good as hackers ?


An open question for all the experts, are testers as good as hackers in finding security holes in companies, web based applications? If not then why companies hire security testing professionals instead of hackers?
Waiting for your opinion.
Testers are better than hackers in my opinion. Hackers always love to break systems, discover imperfections of an application while Testers care about the quality of an application and try to make the customer's experience better with the application.  Testing professionals are better than hackers in finding security holes in companies, web based applications because in security testing we need to focus on SQL injection problems, UI design, performance of an application under heavy load and recognizing logical errors. For all this company needs a professionally trained person, who has the knowledge of testing technology and principles, performance tools. That’s pretty dumb if companies hire hackers instead of security professionals. While the hacker may have proven to be an expert in attacking systems, this can’t be interpreted into being an expert in protecting the systems as well. It’s hard to guard against all kinds of attacks than to perform a single attack on illegally accessed system. A hacker is what takes down security in most cases and exposes information. It all comes down to a question of trust. Giving a person access to your network - especially the kind of access that’s required to analyze your security, is like to giving someone access to your bank accounts. It’s a position that carries a great deal of responsibility. So I don't see why any company would want a hacker to help them with security.

No comments:

Post a Comment