Application Security Assessment

Interviewing a Security Engineer: Attack and Defend on a Live Box

A security trivia quiz cannot tell a real practitioner from a certificate collector. Give a candidate a real, vulnerable box and watch them find and fix the weakness. Here is how to scope it safely and what to score.