ASN.1 and the bug that threatens the strategic networks in the U.S..

. Hacktivism

12:06:02 ASN.1 and the bug that threatens the strategic networks in the U.S..
Some of the critical infrastructure of the United States, such as the telephone network or power plants, would be at risk for a security hole in the language that underlies SNMP. After the notice on the insecurities of SNMP in February, in fact, research has continued in the Oulu University Secure Programming Group, in Finland, a group that specializes in testing protocols with outliers. The research analyzed the abstract language behind SNMP, called Abstract Syntax Notation One (ASN.1), an international standard for transmitting complex data structures, like XML. The method followed was to lie on the amount of data transmitted in a particular field, or to trigger an internal buffer overflow, gaining control over the machine so vulnerable. The matter is so serious that President Bush himself was informed, according to the statement by Richard Clarke (pictured), the head of government cybersecurity, which has been ordered by the President to intervene immediately. It was immediately set up a 'Cyber ​​Interagency Working Group' that should end by June the inventory of federal systems at risk, a mammoth task, as the same responsible. On a practical level, however, is not yet clear how dangerous this bug, as the aviation infrastructures have already undergone tests more accurate than those of the University of Oulu, while power plants are already in a state of restructuring of the systems after 11 September.