Security Gains Sought for Net Protocols
Cybersecurity czar calls for funding
November 4, 2002 12:00 PM ETComputerworld -
National cybersecurity chief Richard Clarke last week called for the addition of a "few million" dollars in annual federal funding for independent research aimed at improving the security and reliability of Internet protocols.
In a conference call, Clarke said he has talked with members of the Internet Engineering Task Force about the idea of creating a test bed that would simulate a large Internetlike system.
The test bed could be used to try out new protocols and routing designs for the Domain Name System (DNS) and the Border Gateway Protocol (BGP), which is used in millions of core routers around the world.
"Systems like DNS and BGP could be the source of intentional or malicious acts, or the source of instability that could flop the Internet," Clarke said. "Frankly, we see a lot of BGP flopping all the time." That, he added, "creates minor pockets of instability in the Internet."
Clarke said BGP can become unstable when human errors in the protocol's routing tables, which are akin to massive phone books, are sent back and forth by routers. BGP is also vulnerable to attack because it doesn't use authentication or encryption, he said.
Packet Design LLC, a Palo Alto, Calif.-based start-up, today plans to announce software designed to enhance the performance of BGP. The technology, called BGP Scalable Transport (BST), uses a "flooding" approach in which a message is sent to a neighboring router and then passed from that device to another router, and so on. The BST software is being marketed to router vendors, said Packet Design CEO Judy Estrin. The software is due for release next month. Pricing starts at $100,000.
John McConnell, an analyst at McConnell Associates in Boulder, Colo., described BST as "very promising technology." But, he added, "you need widespread adoption by the service providers for it to make a difference."
Additional Resources


White Papers & Webcasts
Centralized Data Backup and Your WAN
Is your organization prepared to tackle the massive challenge of protecting your data in a cost effective and timely manner? With a growing...
Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...
An All-in-One Approach to Web Security
Granting web access to employees poses challenges to IT administrators and introduces unique security risks. Even as companies have perfected their security techniques...
Best Practices for Managing Business Risks from the Use of IT
(Source: Symantec) Based on exhaustive benchmarks conducted by the IT Policy Compliance, this session highlights the relationship between business risks and use of...
The Hidden Dangers of Spam
Beyond the well-understood productivity drain that spam inflicts on businesses, threats posed by illicit email circulating through a network are causing many security...
Managing And Protecting Your Ever Increasing Mobile Assets
(Source: Absolute Software) Your users are becoming more mobile each day. This is great for productivity - yet challenging for IT control. Natalie...
Open Source Security Myths Dispelled
(Source: Astaro) Open Source Software is computer software whose source code is available to the general public. This openly viewable nature...
Sun OpenSSO Enterprise Webinar
(Source: Sun) This webinar replay discusses Sun OpenSSO Enterprise innovation--the single, open-source solution that helps your business solve the challenges around internal access...
Best Practices for Backing Up VMware® with Veritas NetBackup™
VMware® is used by enterprises large and small to increase the efficiency and cost-effectiveness of their IT operations. With this in mind, Symantec...
Agile Enterprise Content Management (ECM) for Rapid ROI
(Source: IBM) Content rich business processes are a core feature of daily operations at just about any organization today. Very often these essential...
Subscribe to Computerworld
