Mu Security creates MUSIC certification program

August 13th, 2007

Mu Security, a leader in the security analysis space, today announced a new certification program called MUSIC (Mu Security Industrial Control). If you haven’t heard of Mu Security before, take a look at this Hack Report article, in a nutshell, Mu Security’s appliances automate the security testing an analysis of an IP-based product or application against a whole array of attack scenarios. In other words anyone who needs to test systems, software or appliances against vulnerabilities on ongoing basis will benfit from Mu’s appliances. The list of of Mu’s customers includes network equipment manufacturers like Motorola, Juniper, Alcatel or F5 and service providers like Sprint.

The certification can be carried out by either Mu Security or of their authorized partners and comes with two levels. The foundation-level certification details network infrastructure protocol analysis: ARP, DHCP, IEEE 802.1p/Q, IP, TCP, TFTP; MUSIC Advanced-level certification, which requires initial Foundation-level certification as a prerequisite, focuses on application protocol analysis for: DNP3, FTP, HTTP, LLDP, MMS, MODBUS/TCP, SNMP. Here is a full list of protocols that Mu Security can check against.

At a time where companies are struggling to stay in compliance it’ll be interesting to see whether standard bodies are going to adopt Mu’s new certification. It seems that organizations and auditors alike could save a great deal of money and time by following a standardized process when it comes to testing applications and systems.

Mu Security is going to do a live demonstration of their appliances on August 13-16 at the ACS - Cyber Security Conference in Knoxville, TN.


Enter your email address to get Hack Report news via email:


1 Comment(s)

  1. Comment by Ari Takanen on August 15, 2007 8:54 am

    A quick question from a competitor: Does this "certification" mean that they guarrantee you cannot find other vulnerabilities or defects using other security testing tools? This would be a strong claim by a newcomer in the market. For example Achilles by Wurldtech and various tools from Codenomicon have been effectively used in this space for years already.

Comments RSS TrackBack Identifier URI

Leave a comment

 
-->