Lack of Experience May Plague IoT Security Startups
Eighty-five percent of businesses plan to implement IoT by 2019.
Using CGNAT to Navigate the Path from IPv4 to IPv6
A new A10 Networks white paper provides an overview of the various components required for a complete CGNAT and IPv6 migration solution that encompasses the entire lifecycle of the transition to IPv6.
Some non-lessons from WannaCry
This piece by Bruce Schneier needs debunking. I thought I'd list the things wrong with it.The NSA 0day debate
Schneier's description of the problem is deceptive:When the US government discovers a vulnerability in a piece of software, however, it decides between two competing equities. It can keep it secret and use it offensively, to gather foreign intelligence, help execute search warrants, or deliver malware. Or it can alert the software vendor and see that the vulnerability is patched, protecting the country -- and, for that matter, the world -- from similar attacks by foreign governments and cybercriminals. It's an either-or choice.The government doesn't "discover" vulnerabilities accidentally. Instead, when the NSA has a need for something specific, it acquires the 0day, either through internal research or (more often) buying from independent researchers.
The value of something is what you are willing to pay for it. If the NSA comes across a vulnerability accidentally, then the value to them is nearly zero. Obviously such vulns should be disclosed and fixed. Conversely, if the NSA is willing to pay $1 million to acquire a specific vuln for imminent use against a target, the offensive value is much greater than the Continue reading
Scott Lowe on Getting Started with Network Automation
Learn why network automation is so crucial for the careers of networking and infrastructure professionals, and why you don't need to learn to code to effectively use automation.
Recovering a Stored Password from a Web Browser
Tony Fortunato demonstrates how he retrieved a password stored in Internet Explorer.
Packet Pushers – Network Break Network Break 138: AT&T Buys Vyatta; BA Grounded By Outage
On todays Network Break we cover AT&Ts plans to purchase Vyatta from Brocade, examine a data center outage that grounded British Airways flights, update the latest developments in Cisco and Aristas patent dispute, and much more. The post Network Break 138: AT&T Buys Vyatta; BA Grounded By Outage appeared first on Packet Pushers.
Where Do You Want to Move the Complexity?
Michael Klose left an interesting remark on my Regional Internet Exits in Large DMVPN Deployment blog post saying…
Would BGP communities work? Each regional Internet Exit announce Default Route with a Region Community and all spokes only import default route for their specific region community.
That approach would definitely work. However, you have to decide where to move the complexity.
Read more ...SDN : APIC Vv APIC-EM
Software Defined Network (SDN) is technology to allow network devices to be managed through software application, thus making configuration process automated and faster. Network devices have its own management plane, data plane and control plane. Traditional SDN decouples Control plane from all different devices and have all these control plane go live inside SDN controller […]
Better Security Conversations – Thoughts for a Series
As many PacketU readers know, I have held the role as a vendor SE for a couple of years. In this role, a primary function is to correctly position our products into customer environments. What I’ve come to realize is that many of our conversations actually start incorrectly. I think we need to change that. I will be sharing, as well as structuring, my own thoughts with an upcoming series of posts on security.
I firmly believe that products are only tools and we need to back up to better understand the problems we are trying to solve. One analogy I use on a regular basis when talking about autonomous vehicles is that “no one needs a car [they only need the transportation].” So if technology can provide autonomous cars, transportation can become a service instead of a depreciating asset in our garage.
Although it isn’t a parallel thought or analogy, no organization needs an NGFW for the sake of owning an NGFW. There is a need to provide proper tools required to enable the organization’s security program. Thinking in these terms guides the conversations to a more appropriate solution. My goal with this upcoming series is to help anyone that touches cybersecurity Continue reading