Die Behandlung eines blutenden Herzens - Die Heartbleed-Schwachstelle im KIT-Umfeld

In April 2014, one of the most serious vulnerabilities found so far in the OpenSSL library was published. Due to its severity, this bug has triggered a fairly large media response. As only a few, albeit critical KIT services were affected, a particularly finely-crafted response by KIT-CERT and, cooperatively, KIT's public-relations department was required. Through close cooperation with both the central service administrators and the public-relations officers, KITCERT has been able to handle this issue with a minimal impact on KIT's users, both in terms of security and effort. ... mehrAt the same time, system administrators throughout all of KIT were supported in hardening their servers against this vulnerability. Because of its large scope, the Heartbleed bug can serve as an excellent example of the manyfold and sometimes subtle challenges, particularly in terms of communication, that arise
when handling such delicate problems.