Symantec Voices Security Concerns over Vista's Use of Tunneling ...
Short summary:
Friedrichs said Symantec expects attackers to concentrate on hacking Vista with thirdparty applications as. well as directly. ...
Long summary:
Symantec Voices Security Concerns over Vista's Use of Tunneling ProtocolPage 1Symantec Voices Security Concerns overVista's Use of Tunneling ProtocolSecurity company Symantec says new research supports fears that Windows Vista's use of the IPtunneling protocol Teredo is potentially insecure. Microsoft is using Teredo to enable a transition from IPv4 which is the traditional version of the networklayer protocol for packetswitched networks now used as the Internet's background to IPv6 an updatedprotocol whose biggest benefit is the exponential increase it will bring in the number of IP addressesavailable for networked devices. Symantec based in Cupertino Calif. first brought up concerns about Teredo in November 2006. As thecompany points out in its latest report "Windows Vista Network Attack Surface Analysis" (PDF)Microsoft rewrote the network stack from the ground up in Vista. By doing so Symantec said Microsofthas "removed a large body of tested code and replaced it with newly written code possibly introducing newcorner cases and defects."Oliver Friedrichs a director at Symantec Security Response said the introduction of Teredo one of thosenewly written potentially buggy pieces of code has "a number of security implications.""Many firewalls and intrusion detection systems are not Teredoaware" Friedrichs said in an interview witheWEEK. "They're not familiar with the protocol or how to decapsulate the protocol. That means for onewhen we're talking about a firewall Teredo may allow attacks to circumvent or bypass the firewall." Friedrichs said Teredo also presents a problem in that IDSes (intrusion detection systems) are "generallygood" at looking at TCP and UDP (User Datagram Protocol) traffic which are the traditional protocols thattransport Web and email requests. If attacks on a system are tunneled however they'll be invisible toIDSes he said. "Any security device needs to be aware of Teredo in orde ...
Source: www.physorg.com
Search Terms:
Related
Files under this topic are not filed yet. Please use search bar to find other one
