Sunday 27 December 2015

Cisco launches code review after Juniper's spyware disclosure

However, it found any unauthorized code but continuously reviewing

Cisco Systems has launched an internal code revision after the disclosure last week of code Juniper unauthorized spying in our products the company firewall.

So far, "we have no indication of unauthorized code to our products," wrote Anthony Grieco, senior director of security and confidence Organization of Cisco, in a blog post Monday.

The code review was initiated by Cisco and not the result of contact with the police, Grieco wrote.

Juniper said Thursday an internal audit discovered that could allow the secret code and remote access VPN connections also undertake encrypted. The code has been found in some versions of an operating system called ScreenOS firewall devices powers.

 Juniper Research, but so far he has not said he suspects that the code was inserted. Frank admission of the company met with praise, but hoping to get more details are released.

Juniper The problem is the latest in a series of problems affecting major network providers, including routers and firewalls have deep access to Internet traffic in an organization. The devices are key points of launching espionage campaigns.

Leaked by former NSA contractor Edward Snowden in 2013 documents showed how Western intelligence agencies have tried to undermine the team by Juniper, Huawei and Cisco.

 Grieco wrote that Cisco development practices prohibit the inclusion of "back doors" in their products. Backdoors allow account credentials as secret access undocumented, clandestine channels of communication or tools undocumented trade diversion.

No similar to those discovered by Juniper have been found in code Cisco indicators Grieco wrote. Cisco processes include penetration testing and code reviews by network engineers and cryptography wrote.

"Despite our normal practices should detect unauthorized software, we recognize that any process can eliminate all risks," says Grieco.

Since Snowden was a public document, Cisco has worked hard at demystifying suspicions that he voluntarily worked with intelligence agencies like the NSA.

In May 2014, when Cisco CEO John Chambers has sent a letter to President Obama in May 2014, warning that intelligence operations interfering with his team of "undermining confidence in our industry."

Huawei was excluded from the main business in countries like the US and Australia on unfounded beliefs, working with Chinese intelligence agencies

No comments:

Post a Comment

Note: only a member of this blog may post a comment.