[comp.sys.dec] VMS Modem Security

foltz@ei.ecn.purdue.edu (You Just Gotta believe - Cubs '88) (08/13/90)

Greetings!

I am relatively new to VMS and the VAX world and I have been
assigned the task of developing/finding a security call-back
program for our system.   I was wondering if there may already
be something available before I begin hacking my way through
this assignment.  If not would it be best to write this in
'C' or in DCL??

Thanks in advance,

L. Foltz

terry@spcvxb.spc.edu (Terry Kennedy, Operations Mgr) (08/14/90)

In article <1990Aug13.122446.18881@ecn.purdue.edu>, foltz@ei.ecn.purdue.edu (You Just Gotta believe - Cubs '88) writes:
> I am relatively new to VMS and the VAX world and I have been
> assigned the task of developing/finding a security call-back
> program for our system.   I was wondering if there may already
> be something available before I begin hacking my way through
> this assignment.  If not would it be best to write this in
> 'C' or in DCL??

  While you can construct something passable on the VAX, it is vulnerable to
attack by someone who gains privileged access to the VAX. With the callback
code buried in the modem, such a person would need to gain physical access
to the modem *and* be well-versed in the modem's firmware.

  Outboard boxes between the modem and the VAX fall somewhere in between.

  If you are doing this for real security (as opposed to giving management
warm fuzzies) you should also study the costs/benefits of a modem/outboard
box-based approach.

	Terry Kennedy		Operations Manager, Academic Computing
	terry@spcvxa.bitnet	St. Peter's College, US
	terry@spcvxa.spc.edu	(201) 915-9381