How to keep tabs on BitTorrent

By Ron Condon, UK bureau chief 18 Apr 2008 | SearchSecurity.co.uk

Digg This!     StumbleUpon     Del.icio.us

It is an ingenious system that splits the work by turning all participating computers into potential servers as well as clients, and stores portions of each file on multiple servers.

That makes for a very efficient system that shares the load between computers. But it is also hard to keep track of if, for example, you worry that your content has been pirated. And for anyone seeking forensic evidence to combat illicit downloading, BitTorrent creates a web that makes it very hard to see who is the pirate and who is merely a relatively innocent bystander.

The problem and some solutions are outlined in an article, Forensic Studies in BitTorrent, by Jamie Acorn, published on SearchSecurity.co.uk as part of our series highlighting the work of recent MSc students at Royal Holloway University of London (RHUL).

Acorn says he first began thinking about the problem while working in electronic data recovery and analysis in 2005. "I had seen that the use of BitTorrent had escalated immensely in a short timescale," he says. "The BitTorrent protocol was designed to share large data files quickly. The clients developed for creating and downloading torrent files were very user-friendly, thus making it easier for people to distribute data illegally."

While the forensic world had developed scripts to help investigators tackle file sharing sites such as Kazaa and Limewire, Acorn was surprised to see little research had been done on BitTorrent, even though it was clearly becoming immensely popular. "I knew it would only be a matter of time before criminal cases would be requiring forensic investigations of BitTorrent activity of individuals, so I decided that it would be an interesting project to get my teeth into for my Masters thesis," he says.

The article explains how BitTorrent works and details Acorn's own research on various BitTorrent applications, showing the difficulties involved when trying to build a forensic trail of events.

To read Jamie Acorn's article, click here. The article will also provide a link through to the full thesis.

Tags: Threat and Vulnerability Management,  VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Network Security Management Network telescopes: a vital tool in beating threats Covert channels could be funneling data out of your company Royal Holloway University of London MSc thesis Series NAC market failures spark some aggressive marketing Can CCTV camera security systems stop employee theft? Network access control will save public money in Nottingham Tor network 'bridges' help evade blockers Healthcare org eases compliance with network monitoring Arbor-Ellacoya deal melds security with broadband Threat and Vulnerability Management Zeus botnet temporarily disrupted, but back in full force Considering two-factor authentication? Do cost, risk analysis Clientless SSL VPN vulnerability and Web browser protection Microsoft's Charney details new botnet protection, IdM technology at RSA Look into SIEM services to cut costs, comply with PCI DSS, HIPAA Cloud security issues, targeted attacks to be hot-button topics at RSA Zeus Trojan continues reign infecting 74,000 PCs in global botnet How to use Google Webmaster tools to help protect your site New Community Security Policy aims to reduce computer misuse The value of booting from a VHD in Windows 7

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary Centre for the Protection of National Infrastructure  (SearchSecurityUK.com) Serious Organized Crime Agency  (SearchSecurityUK.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary