Cisco to be under scrutiny again at Black Hat

Cisco Systems Inc.'s products will again come under scrutiny at this year's Black Hat USA 2006 conference, which kicks off later this month in Las Vegas. Conference organizers say that 15 new exploits will be discussed at this year's event and that two of them target NAC (Network Admission Control) and VoIP vulnerabilities that affect products from a number of vendors, including Cisco.

 

Security researchers, no longer as focused on digging up bugs in core Windows components, are looking for green fields, said Black Hat Director Jeff Moss.

Last year, Cisco sued Black Hat conference organizers after security researcher Michael Lynn demonstrated a method for running unauthorized code on a Cisco router. It was a difficult technical achievement that had been considered impossible by some, but Cisco saw it to be a dangerous disclosure of information that could be used to harm the Internet's infrastructure.

Black Hat and Cisco settled the lawsuit after conference organizers promised not to disseminate information on Lynn's research. Lynn is not listed among this year's presenters.

However, it is unlikely that Cisco will be suing the conference this year, given that neither of the exploits target Cisco specifically. Instead they relate to underlying technologies that are used by a large number of products including Cisco's NAC and VoIP (voice Ooer Internet Protocol) products.

Click Here to Continue Reading 

 

« NSF Backs Open Source Wireless Mesh Project | Main | Mobile Skype Internet Calling Now Available Without a Computer on WiFi Phones from Belkin »