Presentation:

Each attendee will be provided an overview on the differences between penetration testing or vulnerability assessments. Mr. Morehouse will first review the objective based assessment drivers and deliverables. He will focus the remainder of the session on the whys? and how's? for each assessment to include the problems and solutions encountered.

Mr. Morehouse serves as the Director of Security Assessments for FishNet Security, where he manages the development and delivery of their Security Assessments solution set, which include Vulnerability Assessments and Penetration Testing, Enterprise Threat Assessments, Wireless Security Assessments, Social Engineering, and Physical Security Reviews.

Mr. Morehouse has over eight years of experience in the information security industry assisting Fortune 1000 clients and Federal Government Agencies. Over the past five years, Mr. Morehouse conducted over two-hundred security assessments utilizing both NIST SP800-42's "Blue Teaming" and "Red Teaming" approaches. Mr. Morehouse has extensive background in security program development, network security, intrusion detection/prevention systems, and vulnerability management solutions. He spoke at the 2007 IEEE EntNet Conference in Washington, DC and is the author of the Passive Recon Firefox extension.  Mr. Morehouse is a CISSP, QSA, MCSE. He earned two bachelor degrees in Accounting and Business Administration from the George Washington University, and recently earned his Masters of Science in Information Assurance from Norwich University.