Connecting to LinkedIn...

W1siziisijiwmtuvmdqvmtuvmdgvntqvmzgvnzi1l01ptlrbu0hfqkxpr19vtljftkrfukvex0lnqudfx3jlc2l6zwrfyw5kx3jlbmrlcmvklmpwzyjdlfsiccisinrodw1iiiwimtkymhgxmjuwiyjdxq

Blog

Study concludes 'Heartbleed' flaw was unknown before disclosure

10/09/2014 by

W1siziisijiwmtqvmtavmjgvmtuvmtuvmzgvnzuvzmlszsjdlfsiccisinrodw1iiiwinjawedqwmfx1mdazzsjdxq

One of the most serious software flaws to affect the Internet, nicknamed "Heartbleed," was likely unknown before it was publicly disclosed, according to new research.

The finding puts to rest fears that government spying agencies may have been exploiting the flaw for surveillance activities.

Widespread attacks using Heartbleed only began about a day after information about it became public, according to the paper, published by researchers at several U.S. universities.

"We find no evidence of exploitation prior to the vulnerability's public disclosure, but we detect subsequent exploit attempts from almost 700 sources beginning less than 24 hours after disclosure," they wrote.

Heartbleed was a flaw in older versions of OpenSSL, a widely used cryptographic library that encrypts data traffic between a client and a server. In some cases, Heartbleed leaked memory from a server, potentially exposing login credentials, cryptographic keys and other private data.

Its disclosure on April 7 set off a scramble to patch. Upwards of 55 percent of the top one million websites ranked by traffic by Alexa were affected, many of which were quickly patched.

To figure out if attacks had been executed against OpenSSL prior to disclosure of the flaw, the researchers analyzed network traffic collected by passive traps at Lawrence Berkeley National Laboratory, the National Energy Research Scientific Computing Center and a honeypot on Amazon's EC2 network.

The networks collectively had full packet traces available from around November 2013 through April. No tell-tale signs that attackers were trying to exploit Heartbleed were found, although such scanning for vulnerable servers "could have occurred during other time periods," they cautioned.

The first attacks were detected 21 hours and 29 minutes after Heartbleed became public from a host at the University of Latvia, they wrote. Soon after, the attacks came fast and furious.

Two days after Heartbleed was disclosed, about 11 percent of the top 1 million sites ranked by Alexa were still vulnerable. The top 500 sites, however, had all patched within that same period.

Three weeks after disclosure, the researchers began contacting the operators of more than 200,000 hosts that were still vulnerable, a laborious undertaking. They did that by extracting the "abuse" email contacts from Whois records.

This article has been extracted from http://news.techworld.com/, please click on this link to read the article in full http://news.techworld.com/security/3544381/study-concludes-heartbleed-flaw-was-unknown-before-disclosure/

Montash is a multi-award winning, global technology recruitment firm. Specialising in permanent and contract positions across mid-senior appointments which cover a wide range of industry sectors and IT functions, including:

ERP, BI & Data, Information Security, IT Architecture & Strategy, Energy Technologies, Demand IT and Business Engagement, Digital and E-commerce, Infrastructure and Service Delivery, Project and Programme Delivery.

With offices based in London, Montash has completed assignments in over 30 countries and has appointed technical professionals from board level to senior and mid-management in permanent and contract roles.

comments powered by Disqus

Social Stream

Latest News

W1siziisijiwmtcvmdevmjavmtavntyvmtkvnzgzl0nsts5qcgcixsxbinailcj0ahvtyiisijm4mhgxmdajil1d

Salesforce moves into Seattle with new engine...

2017-01-20 10:00:00 +0000

Salesforce, a world leader in customer relationship management (CRM) solutions, has revealed that it is to open an innovation and engineering hub in Seattle. In order to increase the firm’s presence in the city, Salesforce Co-Founder Parker Harris said that the office located in Bellevue’s Nine Two Nine Office Tower will focus on its artificial intelligence (AI) initiatives. One reason for the move is so that the firm can access a new pool of talent. Ta...

W1siziisijiwmtcvmdevmtgvmdkvmtqvmzmvmzk5l0vsuc5qcgcixsxbinailcj0ahvtyiisijm4mhgxmdajil1d

Sage bolsters X3 business ERP solution

2017-01-18 09:00:00 +0000

Sage, one of the global leaders in enterprise resource planning (ERP) solutions, has revealed that it has signed up a trio of new clients to its X3 business solution. With the Salesforce.com partner wanting to be able to show its ability to host larger clients, the firm revealed that BrightBridge, Atlas Cloud and CLOUT are all now utilising the new and emerging X3 ERP platform. Sage Vice President of UK Enterprise David Watts talked about the latest agr...