Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Juniper researcher Michael Lynn crashes Cisco party at Black Hat

By Ellen Messmer , NetworkWorld.com , 08/03/2006

The invite-only party last night that Cisco held at a nightclub for Black Hat conference attendees was crashed by security researcher Michael Lynn, who last year was sued by Cisco for revealing a serious flaw in Cisco routers. (Details of the eyewitness account.)

Along with some friends, Michael Lynn, who now works for Cisco rival Juniper Networks, evaded the security checks Cisco had put in place for the party, which included a name check and legal identification. Lynn and his friends, declaring "Cisco owes us a drink," gleefully posed in front of a Cisco sign inside the Pure Nightclub. Once aware the Lynn entourage had crashed the party, Cisco employees took it in stride. (More details on how Lynn got in.)

“We’re here to let security researchers know we want to work with them,” said Jeff Platon, Cisco’s Vice President of Security Solutions Marketing, with some diplomacy.

In his former job as security researcher at Internet Security Systems, Michael Lynn incurred the wrath of both ISS and Cisco at last year’s Black Hat conference as he defied them in going ahead with a planned talk to reveal a buffer overflow vulnerability in Cisco gear.

Cisco and ISS had sought to cancel the talk, even destroying informational material that had already been prepared for attendees.

Lynn, who quit his job at ISS to disclose the Cisco software flaw, was sued by Cisco and ISS, though the lawsuits were resolved within the week with help from attorney Jennifer Granick.

Last night, Lynn said he was enjoying working for Juniper and had moved on from doing vulnerability analysis to assisting Juniper in product design and development across its product line. “Sometimes it’s letting them know what to do, sometimes it’s more of a matter of not doing something,” Lynn commented.

Also at the Cisco party was Gerhard Eschelbeck, CTO at Webroot which makes antispyware software. When asked whether Webroot would stick to being just spyware or branch out into antivirus as well, Eschelbeck said the company was considering a broader strategy that would encompass “malware” malicious code in general.

Eschelbeck said Webroot is considering acquiring an antivirus firm in future announcements on that score were likely to be forthcoming.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.