An
open question for all the experts, are testers as
good as hackers in finding security holes in companies, web based applications?
If not then why companies hire security testing professionals instead of
hackers?
Waiting
for your opinion.
Testers are better than hackers in my opinion. Hackers
always love to break systems, discover imperfections of an application while
Testers care about the quality of an application and try to make the customer's
experience better with the application.
Testing professionals are better than hackers in finding security holes
in companies, web based applications because in security testing we need to
focus on SQL injection problems, UI design, performance of an application under
heavy load and recognizing logical errors. For all this company needs a
professionally trained person, who has the knowledge of testing technology and
principles, performance tools. That’s pretty dumb if companies hire hackers
instead of security professionals. While the hacker may have proven to be an
expert in attacking systems, this can’t be interpreted into being an expert in
protecting the systems as well. It’s hard to guard against all kinds of attacks
than to perform a single attack on illegally accessed system. A hacker is what
takes down security in most cases and exposes information. It all comes down to
a question of trust. Giving a person access to your network - especially the
kind of access that’s required to analyze your security, is like to giving someone
access to your bank accounts. It’s a position that carries a great deal of
responsibility. So I don't see why any company would want a hacker to help them
with security.
No comments:
Post a Comment