Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Cisco's Response to Rootkit presentation - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Cisco's Response to Rootkit presentation

Although I'm still waiting to see a copy of the presentation online, CISCO evidently have and they have posted a response.

You can see Mike Poor's evaluation of the issue here, and then jump straight across to CISCO's quite lengthy response on their site. CISCO have in fact produced what could become the enterprise de-facto process for good practice when deploying hardware and firmware. I can certainly see it being used by some internal auditors to keep us on our toes.





89 Posts
May 25th 2008

Sign Up for Free or Log In to start participating in the conversation!