Re: The Outgoing Traffic Problem

[vern () ee lbl gov]

> a "tie connectivity to a live human" layer for originating network
> traffic, unless the system is a server

FYI, there's an interesting paper on doing this on the end system
(so it has the usual problems of ensuring that malware can't turn
it off, which it acknowledges but doesn't try to solve):

        BINDER: An Extrusion-Based Break-In Detector for Personal Computers

        Weidong Cui and Randy H. Katz, University of California, Berkeley;
        Wai-tian Tan, Hewlett-Packard Laboratories

        http://www.usenix.org/event/usenix05/tech/general/cui.html

- Vern
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards