On Fri, Nov 28, 2003 at 12:50:50PM -0500, Subba Rao wrote:
> Hi
>
> What is the difference between Vulnerability Assessment (VA) vs
> Penetration Testing (PT)? It looks like VA is a subset of PT.
> Would Nessus be classified as a VA tool or a PT tool?
In two sentences :
PT -> you find one flaw -> you win
VA -> you miss one flaw -> you loose
Defining VA as a subset of PT is a misunderstanding in my opinion, it
would rather be the other way round.
Nessus is definitely a VA tool.
-- Renaud
_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus
