BLACK HAT - NAC solutions vulnerable to attack

02.08.2006

Asked about Arkin's presentation, Cisco CSO John Stewart acknowledged that NAC technology is in its infancy and has a ways to go before it will provide comprehensive security.

"The technology's immature. But [NAC] will increase my capability to keep my network in good condition. Can it be maneuvered to have false data? Yes. Would it be completely the case that every device on my network will provide false data? Unlikely."

"It's inherently going to be found that there are weaknesses. But I think that's the wrong thing to focus on. We want to address the weaknesses but focus on the benefits," Stewart said.