Message queuing insecurity

admin
August 19, 2011

I met with Maryellen Ariel Evans last week. She was in Israel on vacation and we had coffee on the Bat Yam boardwalk.   Maryellen is a serial entrepreneur; her latest venture is a security product for IBM Websphere MQ Series. She’s passionate about message queue security and I confess to buying into the vision.
She has correctly put her finger on a huge, unmitigated threat surface of transactions that are transported inside the business and between business units using message queuing technology. Message queuing is a cornerstone of B2B commerce and in a highly interconnected system, there are lots of entry points all using similar or same technology – MQ Series or the TIB.
While organizations are busy optimizing their firewalls and load balancers, attackers can tap in, steal the data on the message bus and use it as a springboard to launch new attacks.  It is conceivable that well placed attacks on  message queues in an intermediary player (for example a payment clearing house) could result in the inability of the processor to clear transactions but also serve as an entry point into upstream and downstream systems.  A highly connected stem of networked message queues is a convenient and vulnerable entry point from which to launch attacks; these attacks can and do cascade.
If these attacks cascade, the entire financial system could crash.
Although most customers are still fixated on perimeter security, I believe that Maryellen has a powerful value proposition for message queuing customers in the supply chains of key industries that rely on message interchange: banking, credit cards, health care and energy.
 
 

More Articles

Understanding Withdrawal Speeds and Limits at Dolfwin Casino In this article, we will delve into the crucial aspects of withdrawal speeds and limits at Dolfwin

Read More »

Explora la experiencia móvil que ofrece Spin Casino MX a sus usuarios En la era digital actual, los casinos en línea han evolucionado para ofrecer

Read More »

Descubre cómo contactar a Spin Casino: El número de contacto que necesitas En este artículo, te proporcionaremos toda la información necesaria para contactar a Spin

Read More »

SG Casino Erfahrungen: Was sagen die Spieler über die Vielfalt der Boni und Aktionen? In diesem Artikel beleuchten wir die Erfahrungen von Spielern mit den

Read More »