Fortify - Application Security
Recent statistics show that almost half of breaches that cause material damage occur via applications. HP Fortify provides software and services that help organization secure applications to prevent those attacks. This blog serves as a platform for our penetration testers, product managers and marketers, and software engineers to provide analysis and insight regarding both web application security and how organizations can utilize our products and services to better secure their applications. For more information, visit

Ethical there a benefit when it comes to security?

A couple of years ago, there was a lot of talk about ethical hacking. And when you saw it in print, it was usually in quotes: “Ethical” hacking [insert evil, maniacal laugh]. The web was full of vitriol for this: “How can hacking EVER be ‘ethical’?” “Once a hacker, always a hacker.” And, even to the more extreme: “If you’re a hacker, it’s criminal. Period.” Fast forward two years later, and it seems that the masses have changed their mind.


Entire conferences are held around ethical hacking—some with impressive cash prizes (read how the Pwn2Own conference just donated over $30k to the Canadian Red Cross), and as part of most collegiate Computer Science programs, you learn about hacking—or, as it is often called—“penetration testing.”


Japan recently held a cybersecurity drill to prepare for the 2020 Olympics, as did Britain, which utilized ethical hackers to test their systems leading up to the 2012 London Olympics. So, is this change in thought permanent? I believe so.


With the massive amounts of technology that our world runs on, there are plentiful opportunities for those UNethical
ethical.jpghackers to find a way in; the best way to protect ourselves is to think like the bad guys. No one knows more about security flaws than the bad guys. To succeed today, security professionals have to think just like them—and this is where we benefit from ethical hackers. By working along with our security teams, they can offer penetration testing so we can determine how to attack our adversaries relentlessly. Technology isn’t going to stop, but we CAN stop the adversaries.


What do you think? Ethical hacking…yay or nay?


On September 8-11th, HP will be holding its premier security conference, HP Protect 2014. The overarching topic this year is: If you want better security, think like a bad guy. This is a great opportunity to discuss relevant security topics (like ethical hacking) with colleagues in your field—and to learn more about different security solutions and offerings. We hope to see you there! 

Labels: HP| security
Leave a Comment

We encourage you to share your comments on this post. Comments are moderated and will be reviewed
and posted as promptly as possible during regular business hours

To ensure your comment is published, be sure to follow the Community Guidelines.

Be sure to enter a unique name. You can't reuse a name that's already in use.
Be sure to enter a unique email address. You can't reuse an email address that's already in use.
Type the characters you see in the picture above.Type the words you hear.
Showing results for 
Search instead for 
Do you mean 
About the Author

Follow Us
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.