Cisco launches code review after Juniper's spyware disclosure

No unauthorised code has been found yet but the review continues

Cisco Systems has launched an internal code review following Juniper's disclosure last week of unauthorised spying code found in its enterprise firewall products.

So far, "we have no indication of unauthorised code in our products," wrote Anthony Grieco, senior director of Cisco's Security and Trust Organisation, in a blog post Monday.

The code review was initiated by Cisco and not the result of contact by law enforcement, Grieco wrote.

Juniper said on Thursday an internal audit uncovered code that could allow secret remote access and also compromise encrypted VPN connections. The code was found in some versions of an operating system called ScreenOS that powers firewall devices.

Juniper is investigating but has not commented so far on how it suspects the code was inserted. The company's forthright admission has been met with praise but with hopes more details are released.

Juniper's problem is the latest in a string of issues that have affected major networking vendors, whose routers and firewalls have deep access to an organisation's Internet traffic. The devices are pivotal points to launch spying campaigns.

Documents leaked by former NSA contractor Edward Snowden in 2013 showed how Western intelligence agencies have sought to compromise equipment made by Juniper, Huawei and Cisco.

Grieco wrote that Cisco's development practices prohibit the insertion of "backdoors" in its products. Backdoors allow covert access, such as undocumented account credentials, covert communication channels or undocumented traffic diversion tools.

No indicators similar to those discovered by Juniper have been found in Cisco's code, Grieco wrote. Cisco's processes include penetration testing and code reviews by networking and cryptography engineers, he wrote.

"Although our normal practices should detect unauthorized software, we recognise that no process can eliminate all risk," Grieco wrote.

Since the Snowden documents became public, Cisco has put significant effort into debunking suspicions that it willingly worked with spy agencies such as the NSA.

In May 2014, Cisco's then-CEO John Chambers sent a letter to President Obama in May 2014, warning that spying operations that interfered with its equipment "undermine confidence in our industry."

Huawei has been shut out of major business in countries such as the US and Australia over unfounded beliefs it works with Chinese intelligence agencies.

Join the CSO newsletter!

Error: Please check your email address.

Tags ciscojuniper networks

More about CiscoHuaweiJuniperNSA

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Jeremy Kirk

Latest Videos

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

  • 150x50

    IDG Live Webinar:The right collaboration strategy will help your business take flight

    Speakers - Mike Harris, Engineering Services Manager, Jetstar - Christopher Johnson, IT Director APAC, 20th Century Fox - Brent Maxwell, Director of Information Systems, THE ICONIC - IDG MC/Moderator Anthony Caruana

    Play Video

More videos

Blog Posts

Market Place