Getting Permission to Break Things

Explore the intricacies of obtaining permission for penetration testing in this 43-minute conference talk from BSides Philly 2016. Delve into the challenges of securing approval, addressing client needs, and navigating legal issues in cybersecurity testing. Learn about defining scope, avoiding pitfalls with external devices, and handling potential catastrophic failures. Gain insights on determining allowed actions, measuring success, and recognizing definite failures in penetration testing scenarios. Conclude with a call to action and engage in a Q&A session to deepen your understanding of ethical hacking practices.

Intro
Introduction...
Why Can't I?
Getting Buy-In
Internal Customers
External Clients
Address their needs
Without permission
With permission
Legal Issues
What's in Scope?
Other Devices - Pitfalls
Catastrophic Failures
What is Allowed?
Success / Failure?
Definite Failures
Call to Action
Questions