Phillip Wylie Show

The Importance of Quality Pen Testing: A Conversation with Katerina Tasiopoulou


Listen Later

About The Guest:
Katerina is the CEO and founder of Exelasis, a cybersecurity organization that focuses on elite pen testing and advanced security testing. She is one of the first female CEOs in the industry, and she is passionate about bringing the elite back into cybersecurity and promoting the importance of pen testing.

Summary:
Katerina discusses the commoditization of pen testing and the need for organizations to prioritize quality over quantity. She explains the difference between pen testing and red team operations, emphasizing that pen testing is coverage-based while red teaming is objective-based. Katerina also shares her thoughts on the role of AI in pen testing and cybersecurity, highlighting the importance of human expertise and the need for ethical guidelines in AI development. She emphasizes the need for organizations to invest in pen testing and validate their cybersecurity measures to ensure the safety of their digital assets.

Key Takeaways:

  • Pen testing is coverage-based, while red teaming is objective-based.
  • AI can enhance pen testing, but it cannot replace the human expertise and ethical decision-making required in cybersecurity.
  • Organizations should prioritize quality over quantity when it comes to pen testing and invest in elite testing to validate their cybersecurity measures.
  • Pen testing is crucial in identifying vulnerabilities and reducing exposure, but it cannot guarantee 100% security.

  • Quotes:

    • "Pen testing really lost the eliteness it could have had. It's become a checklist." - Katerina
    • "Red teaming is an objective-based exercise. It will tell you if the ultimate objective is achievable or not." - Katerina
    • "AI cannot possibly go into an organization and have that logical thinking saying, 'I'm not going to touch that because it's a real customer.'" - Katerina
    • "We want to enhance, not replace. Use AI to enhance, not to replace." - Katerina
    • "Pen testing is not commodity. It's a lot more elite, it's a lot more strategical." - Katerina


    • Socials and Resources:

      https://www.linkedin.com/in/katerina-tasiopoulou-a71424128/

      https://www.linkedin.com/company/exelasis-ltd/

      www.exelasis.com

      ...more
      View all episodesView all episodes
      Download on the App Store

      Phillip Wylie ShowBy Phillip Wylie

      • 4.9
      • 4.9
      • 4.9
      • 4.9
      • 4.9

      4.9

      18 ratings


      More shows like Phillip Wylie Show

      View all
      The Social-Engineer Podcast by Social-Engineer, LLC

      The Social-Engineer Podcast

      150 Listeners

      Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

      Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

      373 Listeners

      Risky Business by Patrick Gray

      Risky Business

      373 Listeners

      Down the Security Rabbithole Podcast (DtSR) by Rafal (Wh1t3Rabbit) Los

      Down the Security Rabbithole Podcast (DtSR)

      97 Listeners

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

      653 Listeners

      CyberWire Daily by N2K Networks

      CyberWire Daily

      1,022 Listeners

      Click Here by Recorded Future News

      Click Here

      418 Listeners

      Cleared Hot by Andy Stumpf

      Cleared Hot

      10,936 Listeners

      Darknet Diaries by Jack Rhysider

      Darknet Diaries

      8,035 Listeners

      Talkin' Bout [Infosec] News by Black Hills Information Security

      Talkin' Bout [Infosec] News

      92 Listeners

      All-In with Chamath, Jason, Sacks & Friedberg by All-In Podcast, LLC

      All-In with Chamath, Jason, Sacks & Friedberg

      9,920 Listeners

      The Jack Carr Channel by Jack Carr

      The Jack Carr Channel

      55 Listeners

      Risky Bulletin by risky.biz

      Risky Bulletin

      44 Listeners

      Simply Defensive by Simply Cyber Media Group

      Simply Defensive

      2 Listeners

      Simply Offensive by Simply Cyber Media Group

      Simply Offensive

      3 Listeners