A Cisco security controversy - Silicon Valley Sleuth

Silicon Valley Sleuth, an insider's view from Silicon Valley
A blog from V3.co.uk





Other blogs
Download Junkie
Your daily dose of download discussion

IT Sneak
V3.co.uk's under cover reporter offers odds and ends from the odd end of the technology

Mac Inspector
Drills to the core of the latest Mac rumours and news

Security Watchdog
Sniffing out IT security issues

The Frontline
Insight into the latest tech news from V3.co.uk's team of reporters

V3.co.uk Labs
The latest UK business technology: quick reviews and first impressions




« RSS is for just a happy few | Main | San Andreas vice »

A Cisco security controversy

If 31 pages are ripped from a conference guide at the last moment, surely that must mean something big is going on.

As it turns out, there is. At this week's Black Hat conference, security expert Michael Lynn was scheduled to give a presentation about an attack method against Cisco routers running the Internet Operating System, the software that controls Cisco routers much like Windows XP controls PCs.

In his presentation, Lynn would have shown how to effectively disable the router using a known exploit in IOS. And with disabling I mean that the attack would make it impossible to reboot or use the equipment.

Cisco and ISS had decided to cancel the presentation because further research was required, according to Cisco.

"When [ISS] would present, they would have presented materials that were much more beneficial to the security industry," Cisco security spokesman John Noh told vnunet.com.

Lynn claimed that Cisco had pressured the security company to do so. As his employer crumbled under the pressure, Lynn decided to do what he believed was the right. He quit his job and proceeded to give the presentation.

As it goes with whistle blowers, his presentation made Lynn an instant celebrity while the lawyers are circling around him.

Cisco and ISS have filed a motion in a California court requesting a restraining order against Lynn. He might have found a genuine way to shut down Cisco routers, the legal complaint argues that he illegally reversed engineered IOS to get there (even if it took him 6 months to do so).

So what? A hacker could take the same approach and shut down the internet. A restraining order won't do much good against a terrorist hacker attack.

Of course we have to behave around copyrights, but copyrights should take a back seat when security is at stake.

Blackhat_guide
31 pages lost...

Tags: cisco, ios, black hat, michael lynn, iss

 

Comments

Post a comment







Useful links: About | Privacy policy | Terms & conditions | Top of the page
© Incisive Media Investments Limited 2010, Published by Incisive Financial Publishing Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, are companies registered in England and Wales with company registration numbers 04252091 & 04252093