Tiller, a security services expert, is a "white hacker" who gets paid to hack into computers to show companies how to strengthen the security of their systems. He defines ethical hacking as a controlled attack to identify a security system's vulnerabilities. He goes beyond the technical aspects of penetration testing to examine testing from a strategic perspective. Useful features are sample planning and agreement forms for such services, and a fold-out flowchart of the steps for setting up an organizational security plan. Lacks references or resources. Distributed by CRC.