Share

Related Stories

  • Information security in China: A license to print money
    With 200 million internet users in China, and a predicted annual growth rate of 17% for the information security market until 2013, why would security vendors want to go anywhere else? William Knight investigates
  • A law without force
    After a deluge of data breaches, the UK government is considering ways to provide the public with better shelter, through strengthening data protection law and punishment. Dan Ilett considers the options
  • Zero Day of the Dead
    The data load that has accompanied the globalization of trade would make even Atlas stagger. And that’s without the added burden of counter-terrorisAs you read this, zombie programs are flitting across the internet like a pestilence to infect and drain the life from innocent computer systems. Yet, for all the aggravation and grief they cause, you may never know you are part of a global invasion of the system snatchers, says William Knight. Unless…
  • The charmed life of cybercrime
    Crimes, scams, and various forms of nonsense are hardly inventions of the digital age. In fact, they are likely as old as human civilisation. Wendy M. Grossman examines why criminals are finding it easier to engage in cybercrime over more traditional forms of physical theft, and why law enforcement finds it difficult to prosecute the perpetrators
  • Orwellian state of security - CCTV
    Wherever you turn in most UK cities and towns, you will spot CCTV cameras. They are there for our protection and safety – or so their owners claim. Are they really that effective? And is anyone watching the watchers? Kari Larsen investigates

Top 5 Stories

News

IT security vendors and Australian police embroiled in technology spat

11 March 2009

An interesting technology row is quietly brewing in Australia that, if unresolved, could have repercussions elsewhere in the world.

The spat centres on the fact that IT security software from several major vendors - notably Kaspersky, Sophos and Symantec - has been found to block legal hacking attempts by the New South Wales police.

The vendors claim that the legal hacking - which is proposed under an amendment to the Law Enforcement (Powers and Responsibilities) Act 2002 - allows police to remotely access a suspect's PC for up to seven days.

The remote access would, Infosecurity understands, not require a court order and, as such, would form part of the police's standard investigations against any suspected criminal.

Preliminary analysis by several IT security vendors suggests that the police would be using the same covert methodologies as criminal hackers, and, as a resulT, their software would block the remote access attempts.

In a prepared statement, Symantec says that its software will block the police's attempt at remote access:

"Symantec's commitment, first and foremost, is to securing its customers' information and as such, Symantec software will block all attempts to compromise its customers' information, regardless of where the threats are coming from," says the company.

Kaspersky Labs, meanwhile, is quoted as saying that, whilst its products would treat all unwelcome outside intrusions as hacking events, it will be happy to assist the police in specific investigations involving electronic crime.

The situation in Australia is rapidly developing into a stand-off situation, Infosecurity notes, but one that has been triggered by technology rather than any political issues.

The situation is similar to proposals by the German government back in 2007, when the government outlined plans to allow police and other legal agencies to infect a suspect's PC with a trojan capable of allowing remote access by stealth.

Although the proposals created a political storm at the time, it is not known whether the German government went ahead with its plans.

Anecdotal evidence, however, suggests that the German government has actively recruited experienced security programmers to work for it on the project.

http://www.parliament.nsw.gov.au/prod/parlment/nswbills.nsf/0/DCD79FCA7419BC52CA25756E0020AA20

This article is featured in:
Compliance and Policy  • Internet and Network Security • IT Forensics • Public Sector

 

Comment on this article

You must be registered and logged in to leave a comment about this article.