Interface Blogs

A few other attacks that come to mind are root bridge injection, management VLAN color tagging, dangling switch syndrome all of which are based IEEE 802.1"x" standards. Even an IP spoofing or loose-source routing attacks can be attributed to RFCs within the IAB's and the task-forces they govern. FISMA, SOX, HIPPA legal compliance also may be subjected to the same analytical debasement. In my opinion, it is the mirror of the struggle that is faced in the encryption realm of security... code makers battling the code breakers. Each struggling to out do the other in a constant ebb and flow of technological advance vs. interpretive application of exploits to leverage the designs described within the standard the other is creating.

I am strained to legitimize open systems within this context but also am aware that in today's environments this type of closure would lead to a critical path within telecommunications industries. Reducing us back into closed systems, islands of automation or proprietary extensions added to existing standards... breaking heterogynous network capability. Can you say "Into the way back machine Mr. Peabody". I cannot say that I have an answer to this conundrum but only offer my observations on how this is occurring in today's constant evolutionary cycle of attacks in Info Sec.

More next time.