By ipaddress | July 10, 2010 - 11:30 pm - Posted in News

Washington working on a defense program against cyberattacks

Wall Street Journal informs that in the USA federal government works over the defensive program known as Perfect Citizen. The program purpose consists in creation of sensors of cyberattacks to the private companies and the governmental agencies controlling a crucial infrastructure, such as the electrical supply, atomic engineering, the chemical and biological industry and permanently delete the item

Supervises the draft U.S. National Security Agency. Now running the NSA is already in the lion’s share of the government and military networks of the U.S.. The new project is planned to create interfaces for the partial merger of government and corporate networks and on all the networks put the sensors, which will fulfill the role of early detection of attacks. The sensors will continuously monitor the state of networks and listen to them for “atypical” activity. Through such “points of interaction, can be avoided the need to monitor all networks at once, at a cost of enormous resources.

Read The Full Story…

By ipaddress | July 9, 2010 - 3:14 am - Posted in News

The Trojan may be installed via USB plug-and-play

Canadian computer engineers have discovered a new way to install hardware Trojans in the system – through a USB-peripherals.

It turns out that the vulnerability in the protocol USB plug-and-play allows any USB-device to impersonate any other. Thus, we can equip trojan keyboard, coffee or even e-cigarette, in principle – any USB-device, and it will get full access to the system.

Such instrument was designed by engineers from Royal military college of Canada, writes News Scientist. They have made the USB-keyboard with a chip which copies files with HDD and can hand over the information the Morse alphabet by means of the light-emitting diode built in the keyboard. Such way of an information transfer is selected only for an example, alternatively it was possible to use cryptography and to send files by e-mail — there is no difference.

The operations contributors have published results in log Future Generation Computer Systems (source).