bugtraq - OSSTMM 3 STAR Released!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Mon, 24 May 2010 20:47:02 +0200
From: Pete Herzog <lists@...com.org>
To: bugtraq@...urityfocus.com
Subject: OSSTMM 3 STAR Released!

Hi,

We have just released the updated STAR, Attack Surface Metrics 
calculation sheets, and the rav formula!

As part of certain requirements towards compliance, more and more Euro 
companies (so far in France, Germany, Italy, and Switzerland) have 
begun getting their infrastructure's attack surfaces certified through 
ISECOM. As this requires access to the OSSTMM 3 STAR, rav calc sheet, 
and rav formula, we have released them separately here:

http://www.isecom.org/ravs/

There's more details there at the site about Attack Surface metrics. 
This is the core of the stuff we've been talking about for a long time 
as a game-changer to the current guessing problem of the risk models. 
This works where risk fails.

Enjoy!

Sincerely,
-pete.

-- 
Pete Herzog - Managing Director - pete@...com.org
ISECOM - Institute for Security and Open Methodologies
www.isecom.org - www.osstmm.org
www.hackerhighschool.org - www.badpeopleproject.org