P2P slammed as 'new national security risk'

Retired US general warns of danger of file sharing

Clement James

Peer to peer technology (P2P) has been described as the “new national security risk” by a retired general at a recent Government Reform Committee hearing.

Retired General Wesley K. Clark, who is now a board member of Tiversa, a company that trawls P2P networks for sensitive information, said, "We found more than 200 classified government documents in a few hours search over P2P networks.

Advertisement

"We found everything from Pentagon network server secrets to other sensitive information on P2P networks that hackers dream about," he added.

At the committee hearing, Clark suggested regulation and mandatory defensive active monitoring programs, especially for sensitive government documents. "If everyone knew the scope of the risk of P2P networks, America would be outraged and demand solutions. If you wait for the lawsuit, you have waited too long," he said.

Clark revealed that many national information security leaks were fresh, complete and were often distributed on home computers over P2P networks.

In March, the United States Patent and Trademark Office released a study revealing that inadvertent file sharing continued to threaten national security. At the time, USPTO CEO Robert Boback said, "We found thousands of corporate cases from banking statements, server passwords, financial data, public company data, human resources, medical records and Fortune 500 company minutes on compliance."

Professor M. Eric Johnson, director of the Center for Digital Strategies at the Tuck School of Business, Dartmouth College, carried out an experiment to illustrate the threat of P2P file sharing. The text of an email message containing an active Visa card number and an AT&T phone card in a music directory was posted in a P2P network that was shared via LimeWire.

"It appears that two takers of the card were able to obtain funds as the activity was split into two groups," Johnson told the hearing. “One taker used Paypal, which is more US-centric, while the other used Nochex, which is UK-centric. Within another week, the calling card was also depleted. Examining the call records of the card, all the calls were made from outside the US to two US area codes – 347 (Bronx, NY) and 253 (Tacoma, WA), illustrating the P2P threat both within and outside of the US. Even more interesting, long after we stopped sharing the file, we observed the file continuing to move to new clients as some of the original takers leaked the file to others."

Committee chairman, Henry Waxman, who is investigating the P2P networks invited LimeWire and StreamCast to testify along with other interested experts on illegal filesharing before the US Houses of Representatives Committee on Oversight and Government Reform.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

IT white papers

Search white papers

Top categories

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

shackleton

Content management tools "barely being used"

Open Text chief predicts more consolidation in ECM market

Scott Totzke

Interview: Scott Totzke, VP global security, RIM

We ask the BlackBerry maker's head of security what CIOs...

Apple Magic Mouse

Review: Apple Magic Mouse

Multi-touch makes an appearance on Apple's latest mouse

clouds

Industry needs to come clean on cloud security

Trend Micro CTO warns of widespread data theft

Primary Navigation