Category: News

These findings run counter to longstanding conventional wisdom from the Internet engineering community, which for years has warned ISPs and corporate network managers about the need to prepare for a time-consuming and expensive upgrade to IPv6.

The U.S. Department of Defense and several universities reported positive feedback about their IPv6 deployments at the U.S. IPv6 Summit 2003, held last week in Arlington, Va.

The Internet Engineering Task Force (IETF) has worked on IPv6 since 1992. While the transition to IPv6 has taken longer than advocates expected, that pace appears to have generated an unintended benefit: Now that users want to deploy IPv6, it’s already bundled in the hardware and software they need to buy in the course of normal infrastructure upgrades. IPv6 promises easier administration, tighter security, greater mobility and an enhanced addressing scheme over IPv4, the Internet’s current protocol.

All the major router manufacturers – including Cisco, Juniper, Foundry Networks and Extreme Networks – support IPv6.

We need the major business applications such as Oracle, PeopleSoft and SAP to support IPv6.” These applications are coming, as evidenced by Oracle executives unveiling their IPv6 road map at the IPv6 Summit last week.

IPv6 and IPv4 will coexist for many years because most companies replace desktops, servers and network gear every few years.

Early adopters say that because IPv6 comes bundled with network hardware and software, deployment costs are low.

More info: [url=http://seclists.org/lists/isn/2003/Dec/0064.html]http://seclists.org/lists/isn/2003/Dec/0064.html[/url]

The move will help EMC reach further into the world of utility computing, a trend sweeping the industry as companies search for ways to make information technology easier to manage and more efficiently used, the Hopkinton, Mass.-based company said. Today, EMC is accelerating the convergence of these two worlds,” he said in a statement.

The acquisition indicates that EMC, which already has a major presence in large corporations, is trying to expand into the same advanced systems management area targeted by IBM, HP, Sun Microsystems, Microsoft and others.

VMware’s software lets a single server run multiple operating systems simultaneously on different “virtual machines,” a technology well developed in expensive mainframe computers, maturing in Unix servers, and now arriving in lower-priced machines based on Intel processors.

IBM’s and HP’s comfort working with a neutral start-up may not carry over to EMC, a competitor in the storage domain, Haff said.

More info: [url=http://zdnet.com.com/2100-1104_2-5124506.html]http://zdnet.com.com/2100-1104_2-5124506.html[/url]

Working together, the two types of software can further help corporations defend themselves against attacks, the companies said.

More info: [url=http://zdnet.com.com/2100-1105_2-5124542.html]http://zdnet.com.com/2100-1105_2-5124542.html[/url]

The center is one of many that industries and their government liaisons formed since 1998 to share vulnerability information and alerts when incidents occur that affect critical infrastructure, such as telecommunications and banking.

Money from Treasury will allow the center to expand to serve the entire financial industry, department officials said. By the end of fiscal 2005, officials expect that the center will be funded entirely by membership fees, which range from $750 to $50,000 per year. Upgrades include:
* Enhancing the network so it can serve more than 30,000 institutions.
* A secure forum for real-time information sharing.
* Physical data threats to the cyberthreat information.
* Web-based warnings and alerts service
* Setting more than 16 performance metrics
More info: [url=http://www.fcw.com/fcw/articles/2003/1208/web-fsisac-12-10-03.asp]http://www.fcw.com/fcw/articles/2003/1208/web-fsisac-12-10-03.asp[/url]

The technologies include:

Core Security Technologies discovered that the Windows Workstation vulnerability announced by Microsoft last month could be exploited using the same type of data used by the SQL Slammer worm to spread across the Internet in just minutes. “We believe these new attack vectors make the vulnerability even more dangerous and critical as the proposed workarounds are not sufficient to close them and particularly because they outline a very plausible scenario for a highly efficient worm,” Ivan Arce, chief technology officer for security software maker Core Security Technologies, wrote in an e-mail to CNET News.com.

The company’s report also found that flaws in the Windows Messenger service, which allowed the MSBlast worm to spread this summer, could be exploited using the same “fire-and-forget” user datagram protocol (UDP) packets.

Core ST acknowledged that the patches will prevent the attacks and also urged people to apply the fixes.

More info: [url=http://zdnet.com.com/2100-1105_2-5118580.html]http://zdnet.com.com/2100-1105_2-5118580.html[/url]