[DG-IDoT] snmp for security devices

Salvatore D'Agostino sal at idmachines.com
Tue May 20 10:43:12 CDT 2014


Scott,

 

Yes this has been around for a while.  It certainly matters how people use SNMP.  Like most things done badly a number of attacks afford.  See recent open redirects on Connect.  Implementations matter.  We are continuing the work referenced below with SNMP around physical security system networked devices. 

 

Regards,

 

Sal

 

From: Scott Shorter [mailto:sshorter at electrosoft-inc.com] 
Sent: Tuesday, May 20, 2014 9:59 AM
To: Salvatore D'Agostino
Cc: dg-idot at kantarainitiative.org
Subject: Re: [DG-IDoT] snmp for security devices

 

Hi all, 

 

I'm resurrecting this old thread to share a happy update.  I just learned about RFC 3414 <http://www.ietf.org/rfc/rfc3414.txt>  and RFC 3826 <http://www.ietf.org/rfc/rfc3826.txt>  which add support for SHA-1 and AES to SNMPv3.

-

Scott

 

On Tue, Dec 17, 2013 at 3:52 PM, Salvatore D'Agostino <sal at idmachines.com> wrote:

Reality of what’s out there not what it should be.

 

From: Scott Shorter [mailto:sshorter at electrosoft-inc.com] 
Sent: Tuesday, December 17, 2013 2:07 PM
To: Salvatore D'Agostino
Cc: dg-idot at kantarainitiative.org
Subject: Re: [DG-IDoT] snmp for security devices

 

Thanks Sal, very helpful presentation.

 

Slide 9 makes me sad, though.  MD5 and DES should be extinct.  Algorithm flexibility, please!

 

Best,

Scott

 

On Tue, Dec 17, 2013 at 1:01 PM, Salvatore D'Agostino <sal at idmachines.com> wrote:

All,

 

I think I may have already sent this to the list.  It is what I talked to on the call.  There is a presentation with further background on the page.

 

http://www.siaonline.org/Pages/Standards/SNMP-Subcommittee.aspx 

 

Happy holidays.

 

Sal

 

 

Salvatore D'Agostino, CSCIP

IDmachines LLC |1264 Beacon Street, #5 | Brookline, MA  02446 | USA

http:\\www.idmachines.com <http://www.idmachines.com/>  | http:\\idmachines.blogspot.com <http://idmachines.blogspot.com/>  | @idmachines

+1 617.201.4809 <tel:%2B1%20617.201.4809>  ph | +1 617.812.6495 <tel:%2B1%20617.812.6495>  fax

 


_______________________________________________
DG-IDoT mailing list
DG-IDoT at kantarainitiative.org
http://kantarainitiative.org/mailman/listinfo/dg-idot





 

-- 
Scott Shorter, Principal Security Engineer, Electrosoft Services Inc.

sshorter at electrosoft-inc.com O: 703-437-9451 x21 <tel:703-437-9451%20x21>  M: 240-994-7793





 

-- 
Scott Shorter, Principal Security Engineer, Electrosoft Services Inc.

sshorter at electrosoft-inc.com O: 703-437-9451 x21 M: 240-994-7793

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kantarainitiative.org/pipermail/dg-idot/attachments/20140520/58031f83/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6085 bytes
Desc: not available
URL: <http://kantarainitiative.org/pipermail/dg-idot/attachments/20140520/58031f83/attachment-0001.bin>


More information about the DG-IDoT mailing list