Security firm Cenzic and technology giant Hewlett-Packard announced on Monday that the companies had put away their lawyers and made peace after filing dueling lawsuits over each others' patented Web security technology.
In September 2006, security firm SPI Dynamics -- now owned by HP -- filed a lawsuit against Cenzic for allegedly violating its seven-month-old patent for an interative method for finding vulnerabilities titled "Internet security analysis system and process" (No. 6,996,845). Cenzic received its own patent for using fuzzing to find vulnerabilities -- titled "Fault injection methods and apparatus" (No. 7185232) and granted in February 2007 -- and five months later filed its own lawsuit.
The companies announced that they had agreed to cross-license each others' technologies.
"This agreement settles the outstanding litigations filed by SPI Dynamics (which was acquired by HP) in Federal Court in Georgia and filed by Cenzic in Federal Court in Virginia, and these lawsuits will be immediately dismissed," the companies said in a joint statement.
Security experts have stated that the methods described in the Cenzic patent, which has received more attention than SPI Dynamics patent, appear to be techniques that have been in use for awhile by researchers. While the security professionals voiced opposition to Cenzic's lawsuit and patent, they apparently did not realize that SPI Dynamics, now owned by HP, filed suit first.
If you have tips or insights on this topic, please contact SecurityFocus.
Posted by: Robert Lemos