Speaker:
Yvette du Toit, Manager: Attack and Penetration Testing ay Ernst
& Young
Presentation
topic: Penetration
testing: What The Hack?
Presentation
overview:
• Penetration testing defined
• Penetration Testing Lifecycle
• Anatomy of a hack
• Hack with Jack - demo
• Questions
About
Yvette du Toit:
Professional
Qualifications
- Yvette
holds a Retail Management Degree and is studying a MSC
Information Security at Royal Holloway University, London via
correspondence.
- eXtreme
Hacking - Ernst & Young LLP UK
- BS7700 Lead
Auditor - BVQ1 Limited UK;
- Hacker
insight Training - Defcom Information Security UK;and
- Ethical
hacking - Internet Security Systems UK.
Profile
Yvette
has over 8 years experience in managing Attach and Penetration
assessments at leading companies within the UK, Middle East and Europe
and now heads up the Attack and Penetration Testing team in South
Africa.
Yvette joined Ernst & Young in 2006 in their London
office. She is an expereinced and successful Penetration Testing Team
Manager with a background that started in IBM Internet Security
Systems, LogicaCMG & SecureTest.
She is currently doing a
correspondence MSc Informaiton Security at Royal Holloway University of
London following the technical route and is also a qualified Lead
Auditor: ISO27001. She is an advocate and active member for EY on the
Council of Registered Ethical Security Testers (CREST) and is also a
member of the Information Systems Security Association (ISSA). Yvette
has recently transferred to the South African Practice where she heads
up the Attack and Penetration Testing competency.
Professional Experience
- Yvette
specialises in penetration testing with experience in assurance over
the technical and non-technical aspects of information security.
- Yvette
combines excellent management experience with good technical knowledge
in order to deliver focussed management of technical projects
- Yvette's
extensive knowledge of the industry gives her a unique skill in
managing Information Security projects to the highest quality
- Yvette has
considerable experience in conducting security reviews, as
well as social engineering
- Prior
to joining Ernst & Young, Yvette headed up a team of 15
penetration
testers for SecureTest in the UK where she was also responsible to the
delivery of projects to time, budget and the highest quality.
- Managed
ethical hacking projects for a vast number of clients in the UK, Saudi
Arabia, Australia, South Africa, Sweden, Greece, The Netherlands and
Germany, ranging from vulnerability assessments, code reviews, reverse
engineering, application testing, IT security strategies and all other
aspects of ethical hacking as well as physical security.
Professioa