Automating Penetration Tests, Iván Arce - Presentation at the SANS I/O Wargames 2001 conference

An in-depth presentation about the state-of-the-art of the penetration testing practice and the technical and conceptual foundations and rationale for developing automated penetration testing software. The basic abstractions, building blocks and ideas behind CORE IMPACT; which would become the first ever commercial-off-the-shelf penetration testing software 8 months afterwards