cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
241
Views
1
Helpful
1
Replies

IDS sigfnatures that alert on chat program usage ( AIM, Yahoo, ICQ, etc...)

jamell_cr
Level 1
Level 1

Does any one know how to creqte a signature base to catch these software packages. My security policy does't allow these but I want to know if my users find a way around my policy. An ideas?y

1 Reply 1

ibsenj
Level 1
Level 1

Chat programs are easy to detect and block, unlike P2P protocols. See the folowing links for info:

http://www.infosecuritymag.com/2002/aug/cover.shtml

http://documents.iss.net/whitepapers/X-Force_P2P.pdf

Jeff