Interface Blogs

I teach many disciplines in technology but by far my passion is security. One of my theories on vulnerability categories is that there is a meta-category that can transcend multiple categories that I call "Standards-Based Attacks". Many of us are familiar with the Social Engineering, Application, or Distributed/Denial of Service, etc... My thoughts is that in the analysis of standards in electronic communication, policies, encryption, Info Sec principles and such are being dissected and used as attack vectors by attackers. One such instance that comes to mind is arp cache poisoning, it is clearly based on switching concepts following the IEEE standards. I truthfully believe that we are slowly being forced back into closed system environments and vendor specific resolutions due to this behavior. Think about how many attacks are predicated on standards within our communications and Info Sec principles.

     ...to be continued