Russian firm Echelon conducted a source code review of the Pentagon's core military cyber defence software, ArcSight, last year, according to insiders. The review was necessary for ArcSight developer Hewlett Packard Enterprise to secure the certification required to sell the software in Russia. Echelon is known to have links to the Russian military. During the review, researchers looked for vulnerabilities and "back doors", with any flaws discovered reported to US and Russian agencies. Markov, Echelon’s president, defended the reviews, saying that “if a vulnerability is found, everyone is happy” because the detected flaw means laboratory experts are “able to demonstrate their qualifications” and “the developer is happy that a mistake was detected, since by fixing it the product will become better.” A spokesperson from Hewlett Packard, which makes ArcSight, said it had no comment at this time. "You are definitely giving inner access to an adversary," he said.
Russian firm Echelon conducted a source code review of the Pentagon's core military cyber defence software, ArcSight, last year, according to insiders. The review was necessary for ArcSight developer Hewlett Packard Enterprise to secure the certification required to sell the software in Russia. Echelon is known to have links to the Russian military. During the review, researchers looked for vulnerabilities and "back doors", with any flaws discovered reported to US and Russian agencies. A spokesperson from Hewlett Packard, which makes ArcSight, said it had no comment at this time. "You are definitely giving inner access to an adversary," he said.