Using Linode for Security Testing
I'm an information security analyst for a large organization. I am looking to use a Linode as a security test point to test our external network for security issues. Obviously this is my network so I'm authorize to run port scans and other security tools against it. As I read the TOS I don't see that this would be against the rules but I wanted to check to confirm.
I'm also awaiting a response. This is what I've been using my Linode for, and I've been with Linode.com for quite awhile. While I'll scan, I definitely won't use tools like Nessus from my linode, as it was never clear that I could actually perform vulnerability assessments against networks that weren't mine…I don't want to get shut down, so I opt to just conduct my assessments from somewhere else.
I'm also not doing this as a business, but I'm a professional IT security guy and this is how I learn to perform incident analysis and freshen up my skillset (so, this is definitely work-related).
There's certain things I won't do, though…not until I've clear and concise input from a Linode rep.
> Access to Other Computers or Networks without Authorization: Attempting unauthorized and/or illegal access of computers, networks and/or accounts not belonging to party seeking access. Any act which interferes with the services of another user or network. Any act relating to the circumvention of security measures.
Is probably the most applicable section.
If you were hired to test their security, if that qualifies as authorized, is up for debate with Linode