bugtraq - White paper release: Bypassing network access control (NAC) systems

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <5F34EB1E-0DDD-470B-9AC6-7AC72C9F8AAE@sys-security.com>
Date: Tue, 19 Sep 2006 19:04:24 +0300
From: Ofir Arkin <ofir@...-security.com>
To: bugtraq@...urityfocus.com
Subject: White paper release: Bypassing network access control (NAC) systems

Dear all,

I am pleased to announce the availability of a new white paper  
"Bypassing network access control (NAC) systems".
The paper discusses weaknesses and ways to bypass existing NAC  
solutions.

 From the abstract:
The threat of viruses, worms, information theft and lack of control  
of the IT infrastructure leads companies to implement security  
solutions in order to control the access to their internal IT  
networks. A new breed of software and hardware solutions from a  
variety of vendors has recently emerged. All are tasked with one goal  
- controlling the access to a network using different methods and  
solutions. This paper will examine different strategies used to  
provide network access controls. Flaws associated with different NAC  
solutions will be presented. These flaws allow the complete bypass of  
each and every network access control mechanism currently offered on  
the market.

The paper can be downloaded from:
http://www.insightix.com/resources/whitepapers/bypassing.aspx

My Blackhat 2006 presentation can be downloaded from:
http://www.sys-security.com/index.php?page=conferences

Yours,
Ofir Arkin
Ofir at Sys-Security dot com