This presentation talks about the fact and fiction of today's security devices. It explains how to approach testing the validly of their claims and provides multiple examples of real world products and their weaknesses.

Rarely do security engineers look at network products from the creation point of view. Understanding how and why they are created and the limitations of that process can lead to finding security issues quite a bit quicker and easier.

Download: http://www.secure-software-engineering.com/downloads/recon2006/recon2006_Cox_Insider_View.pdf