[Owasp-leaders] PCI Section 6.5

Pravir Chandra chandra at owasp.org
Mon May 18 12:04:08 EDT 2009


Not that I know of since there's no standard protocol/interface for interactions with the core software.

p.

~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~ ~~~~~~~~ ~~~~~ ~~~ ~~ ~
Pravir Chandra                      chandra<at>list<dot>org
PGP:    CE60 0E10 9207 7290 06EB   5107 4032 63FC 338E 16E4
~ ~~ ~~~ ~~~~~ ~~~~~~~~ ~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~

-----Original Message-----
From: "McGovern, James F (HTSC, IT)" <James.McGovern at thehartford.com>

Date: Mon, 18 May 2009 10:49:45 
To: <Owasp-pci-project at lists.owasp.org>
Cc: <owasp-leaders at lists.owasp.org>
Subject: Re: [Owasp-leaders] PCI Section 6.5


 
PCI also allows for an <<application firewall>> and am curious if one
exists for applet-style architectures.

-----Original Message-----
From: Menerick, John [mailto:jmenerick at netsuite.com] 
Sent: Friday, May 15, 2009 3:16 PM
To: McGovern, James F (HTSC, IT); Owasp-pci-project at lists.owasp.org
Cc: owasp-leaders at lists.owasp.org
Subject: RE: PCI Section 6.5

There are few scanners which will attempt to expose holes, but none are
a simple "point and click solution."  Your best coverage is to perform
manual penetration testing and analysis.


John  Menerick
NetSuite Security
************************************************************
This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential and/or privileged information.  If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited.  If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this communication and destroy all copies.
************************************************************

_______________________________________________
OWASP-Leaders mailing list
OWASP-Leaders at lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-leaders


More information about the OWASP-Leaders mailing list