RSSStopping Computer Viruses Before They Reach You
from the is-this-that-big-of-a-deal? dept
Roland Piquepaille writes "The Washington University in St. Louis (WUSL) announced that one of its computer science teams has developed a new technology to stop computer viruses and worms before they reach your system. John Lockwood and his team didn't use software. Instead, they created an open platform that augments a network with reprogrammable hardware, called the Field-programmable Port Extender (FPX). "The FPX can scan each and every byte of every data packet transmitted through a network at a rate of 2.4 billion bits per second. In other words, the FPX could scan every word in the entire works of Shakespeare in about 1/60th of a second," said Lockwood. Real products based on the technology should appear soon. More excerpts and references are contained in my blog which also includes a photograph of an FPX module." I'm a little confused as to what the big deal is about this. It's basically doing two things: put antivirus protection at the network level instead of the end client, which isn't a new idea at all and using an FPGA hardware solution instead of software (which they seem to be saying is faster). Am I missing something, or is this not that big of a deal?
5 Comments | Leave a Comment..
- DailyDirt: Autonomous Vehicles
- How Publishers Repeated The Same Mistake As Record Labels: DRM Obsession Gave Amazon Dominant Position
- Park Ranger Tases Guy Walking Dogs Without A Leash
- Brazilian Government Ordering Web Hosting Firms To Kill Domain Names They Don't Like
- Syrian President's Email Hacked... His Password Was 12345
Reader Comments (rss)
(Flattened / Threaded)
Need more details
I'd also be curious as to the number of concurrent file transfers it can maintain state info for.
[ reply to this | link to this | view in thread ]
One problem:
How the hell are your going to scan traffic if you don't know what to fscking look for.
All it takes is one worm that isn't stupid about how it discovers adjacent hosts (how about using netbios/another "native" microsoft protocol instead ICMP?) and uses a polymorphic intrusion process (no need to fill that buffer up with the same thing over and over again).
...15 minutes later, while the admin is still typing content into their nifty filter, you're entire network is wormed.
This sounds like a really weak technology that only fixes the current state of the art problems.
[ reply to this | link to this | view in thread ]
I'm a little curious...
[ reply to this | link to this | view in thread ]
...and it's implemented in hardware.
[ reply to this | link to this | view in thread ]
Re: I'm a little curious...
[ reply to this | link to this | view in thread ]
Add Your Comment