ADVISORY/Experts Available to Discuss Vulnerability in Snort Software.

Business Editors

ADVISORY...

--(BUSINESS WIRE)--March 5, 2003

TOPIC: Internet Security Systems, Inc. announced a buffer overflow vulnerability in code used by Snort open-source intrusion detection system (IDS) software, which detects an attack technique called remote procedure call, according to an article on InfoWorld.com. Remote procedure call fragmentation can be used to bypass intrusion detection systems. Internet Security Systems suggested that Snort users upgrade their source implementation. EXPERTS: ExpertSource can offer several highly qualified experts to comment on this story:

Mike Paquette, of Top Layer Networks, is an accomplished presenter in the areas of network security, Internet bandwidth management, and network architecture. He has been a panelist and chair at the Cyber Security Summit for Financial Services Sector, a "Top 5" presenter at IBAND, and a repeat security speaker at the ASP Forum. Mike has addressed the venture capital community on security products at conferences such as the annual JPMorgan H&Q Technology Conference, and he has delivered technical presentations on network technology and performance testing of network security products around the world. Mr. Paquette has been with Top Layer Networks since 1998. Before joining Top Layer Networks, Mike was a Senior Engineering Manager at Digital Equipment Corporation in the Network Product Group. He was responsible for Digital's multi-technology switch product development, where he supervised more than 90 engineers. Mike has more than 18 years of networking and security experience with an extensive background in the design and development of networking and security products. 508-870-1300, [e-mail]

Shawn Nunley is the director of technology development for NetScaler, a leading provider of web application traffic control systems. In this position, he is responsible for the security architecture and strategic direction of the company's products. Previously, Nunley held the position of Director of Research at Exodus Communications, a Cable and Wireless company. While at Exodus he was responsible for the company's Content Distribution strategy and was a key member of several due diligence teams during various acquisitions. Prior to that, Nunley spent four years at Secure Computing Corporation where he worked as product line manager responsible for the Authentication Division of Secure Computing. During his tenure with Secure Computing, Nunley resided in London to develop the international sales channel, where he created and delivered product training to customers and resellers and dramatically increased product sales. Nunley has also developed information security awareness training programs and worked to educate government agencies around the world including the FBI and NSA. Nunley is an active spokesperson at industry forums and events. His areas of expertise include authentication and access controls, incident response and computer forensics, cryptology, security policy development and enforcement and disaster recovery. 408-987-8737, [e-mail]

Ben Klein, of Ben S. Klein Consulting, is an expert regarding computer science and network security plans. 718-730-9174

ExpertSource cannot guarantee the immediate availability of these experts or their familiarity with this specific issue.

ExpertSource provides academic and industry experts to the media at no charge. Journalists are encouraged to submit queries to ExpertSource when seeking experts on specific subjects. An online registration form is available at http://www.businesswire.com/ifmd/index.html.