Timeline for Detecting malware hidden in P2P traffic
Current License: CC BY-SA 3.0
20 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 7, 2015 at 14:07 | comment | added | user88609 | who made the p2p virus and what date | |
| May 4, 2013 at 12:18 | vote | accept | pnp | ||
| Jan 17, 2013 at 14:45 | history | edited | Ali Ahmad |
edited tags
|
|
| Jan 17, 2013 at 4:37 | answer | added | Ali Ahmad | timeline score: 1 | |
| Jan 16, 2013 at 16:36 | comment | added | Novice User | @sourcejedi : Bittorrent encrption ( Assuming you are talking about Encryption options in clients) are not fully proof. For instance in Iran it doesnt help. | |
| Jan 16, 2013 at 16:32 | comment | added | Novice User | I dont understand how a malicious file has (IN case of A) is matching with that of B & C. ? | |
| Jan 16, 2013 at 16:10 | answer | added | smttsp | timeline score: -1 | |
| Oct 14, 2012 at 10:00 | comment | added | sourcejedi | BitTorrent also has an encryption feature which prevents throttling by ISPs (because its harder to tell that it's bittorrent traffic). So I think the only way to do this is at the application layer - as suggested by Tom Newton. | |
| Oct 14, 2012 at 9:46 | answer | added | Tom Newton | timeline score: 2 | |
| Oct 14, 2012 at 9:14 | history | edited | pnp | CC BY-SA 3.0 |
added details, edited title
|
| Jul 26, 2012 at 11:28 | comment | added | CodesInChaos | With a lot of p2p software(such as freenet) a network admin can't see what data is transmitted). So trying to block malware at the network level is doomed. | |
| Jul 26, 2012 at 11:14 | comment | added | Ramhound | @pnp - Your estimate is wrong. You need security software, that is not a workaround, despite the fact you claim it is. As I already indicated until the file is ran, its harmless, use P2P software that doesn't auto-execute files and your safe. | |
| Jul 25, 2012 at 17:55 | history | edited | curiousguy |
edited tags
|
|
| Jul 25, 2012 at 16:14 | comment | added | pnp | @Ramhound "block P2P traffic" !! NO!!!! I have to deal with P2P traffic, and only P2P traffic, and all kinds of varieties of it. I am not looking for work arounds. In my estimate I need a (so as to say) P2P aware IDS- firewall (both or either)- and that is exactly what I asked... | |
| Jul 25, 2012 at 16:07 | comment | added | Ramhound | Until you run qwerty.mp3 then it is harmless. What exactly is your question? The solution is to block Peer 2 Peer traffic as a network admin. The few useful uses can be approved by you on a case by case situation ( or simply worked around ) as those same cases have direct download solutions. | |
| Jul 25, 2012 at 15:09 | history | edited | pnp | CC BY-SA 3.0 |
added details
|
| Jul 25, 2012 at 14:47 | answer | added | Oleksi | timeline score: 4 | |
| Jul 25, 2012 at 14:38 | comment | added | pnp | @randomdude I must consider all possible cases- for protocols, for inhouse transfer and off the shelf (I am not very sure of what is "off the shelf"), etc. Yes, a user may simply share malicious content. I think i covered this when i wrote "...and the file at his end contains a malware/ virus/ trojan etc.". | |
| Jul 25, 2012 at 14:23 | comment | added | randomdude | What protocol are you using for your peer-to-peer transfer? Is it inhouse or off-the-shelf? Also, have you considered a related case - a user simply shares malicious content with the filename of 'real' content? | |
| Jul 25, 2012 at 13:15 | history | asked | pnp | CC BY-SA 3.0 |