Re: [fw-wiz] The Outgoing Traffic Problem
- From: vern@xxxxxxxxxx
- Date: Tue, 18 Jul 2006 14:30:37 -0700
a "tie connectivity to a live human" layer for originating network
traffic, unless the system is a server
FYI, there's an interesting paper on doing this on the end system
(so it has the usual problems of ensuring that malware can't turn
it off, which it acknowledges but doesn't try to solve):
BINDER: An Extrusion-Based Break-In Detector for Personal Computers
Weidong Cui and Randy H. Katz, University of California, Berkeley;
Wai-tian Tan, Hewlett-Packard Laboratories
http://www.usenix.org/event/usenix05/tech/general/cui.html
- Vern
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
- Prev by Date: Re: [fw-wiz] DMZ and critical data
- Next by Date: [fw-wiz] SNMP RW ASA 7.2.1
- Previous by thread: Re: [fw-wiz] The Outgoing Traffic Problem
- Next by thread: Re: [fw-wiz] The Outgoing Traffic Problem
- Index(es):
Relevant Pages
|
|
