Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Which vendors have established a strong security process during development where they educate firmware developers about security issues, arrange security engineers to review the code, accept vulnerability reports, fix any vulnerabilities found and issue timely firmware updates and advisories?

share|improve this question

closed as not constructive by John Gardeniers, RobM, Tom O'Connor, Shane Madden, Sam Jul 15 '11 at 16:50

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

    
This question is really too broad for any meaningful answer. There is almost no way that any single person has worked with every single vendor out there. You might want to refine your question or risk getting it closed. –  ErnieTheGeek Jul 14 '11 at 13:10
    
There's no need for a person to have worked with many different vendors in order to answer this question. You can evaluate the security of a product directly by talking to the firmware developers and other insiders, by looking at how the company handles vulnerabilities and so on. If you know of a single router/modem manufacturer that has established a strong security development process internally, please share your knowledge. It's as simple as that. –  Alexander Konovalenko Jul 14 '11 at 16:14
add comment

1 Answer 1

Cisco and Juniper.

Everything else like netgear, linksys, Buffalo etc. are aimed at the mass market, so everything is colourful, shiny, and easy to use. Sadly security apparently comes as a lower priority to these types.

Here's your trinary selector:

Easy-to-use, Secure, Cheap.

Choose two.

share|improve this answer
2  
Cisco and Juniper are the only wireless router vendors that care about security, @Tom? Aruba, Meru and Trapeze, at the very least, would probably have something to say about that. –  RobM Jul 14 '11 at 10:31
    
I've never used them. I can't say. –  Tom O'Connor Jul 14 '11 at 11:31
    
+! for the trinary selector. Wish more people thought this way :) –  ErnieTheGeek Jul 14 '11 at 13:14
1  
Strictly, that should read "Choose at most two." –  nickgrim Jul 14 '11 at 14:41
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.