Boston, MA–November 10, 2004: SecurityLab Technologies Inc, provider of enterprise security training products and consulting services, today announced that CTO, Ejovi Nuwere, will present the findings from his audit of Japan.s National ID system Juki-Net at the PacSec Security Conference in Tokyo, Japan. During Nuwere.s audit, from September to November 2003, his identity was kept secret from the media during a heated political battle in Japan. For the first time, Nuwere is revealing his identity as the only foreign member of the original three-man audit team and will present his findings and personal opinion of the state of Japan.s computerized National ID system.
“The greatest concern was if the Juki network could be successfully hacked, therefore, compromising the identity of residents. Our comprehensive test proved that the system could be compromised but the media did not cover how” said Ejovi Nuwere, SecurityLab’s founder and CTO. “The fact that a nefarious person could walk out of a government office with the personal identity of anyone within the prefecture was obscured by the highly politicized test environment. In simple terms, I will present the findings and threats to citizens in Japan”
The audit was conducted to access the vulnerability of the National ID system to outside hackers and potentially corrupt employees. During testing Nuwere was able to successfully compromised servers that maintain National ID information. The audit team.s detailed report raised concerns about Juki-Net implementation and setup, showing the network could be easily compromised at multiple points. Though the findings were relevant to prefectures across the country, it was mostly ignored. Since the test, at least three prefectures have suffered security compromises and numerous privacy related lawsuits.
“Nuwere’s efforts are indicative of a new and important trend in awareness of security for the design of the information system of Japan, that will hopefully lead to better and more reliable systems”, said Dragos Ruiu, CEO of PacSec Japan. With first hand knowledge of the need for security awareness SecurityLab Technologies Inc. provides security training products and consulting services, as well as on-line courses making it convenient for customers to reach and gain knowledge of computer security from comfort of there home or office. Unconventional on-line security courses provide a variety of programs from security basics to more advanced penetration and audit techniques.
