RE: PDA pen testing question

From: Jerry Shenk (jshenk_at_decommunications.com)
Date: 02/08/05

  • Next message: John Thomas: "Mapping Class A network ( any easy trick?)" 
    To: "'Jon'" <jonbrownisme@yahoo.com>, <pen-test@securityfocus.com>
Date: Tue, 8 Feb 2005 10:17:52 -0500

    Something on this page might be helpful:
    http://www.sans.org/rr/whitepapers/pda/

    NIST had a draft proposal for some PDA handling guidelines on their site
    a few months ago but it's not at this link anymore,
    http://csrc.nist.gov/publications/drafts.html#sp800-72. Perhaps it got
    finalized or something...it seems like it should be out there someplace.

    -----Original Message-----
    From: Jon [mailto:jonbrownisme@yahoo.com]
    Sent: Tuesday, February 08, 2005 8:10 AM
    To: pen-test@securityfocus.com
    Subject: PDA pen testing question

    I am looking into penetration testing of PDAs (Palm, Windows CE, Symbian
    etc.) at the application and OS level and was wondering if anyone has
    any knowlage in this area. Any pointers to tools, papers or other
    resources would be great.

    I was suprised that I could not find any real analysis of security
    mechanisms and their effectiveness in Windows CE (at least at the level
    of the @stake analysis of the Palm OS), but maybe I have not looked hard
    enough...

    Thanks, Jon

  • Next message: John Thomas: "Mapping Class A network ( any easy trick?)"
    • Quantcast