Re: Anti-spyware at the Gateway
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: Anti-spyware at the Gateway

From: Volker Birk <bumens@dingens.org>
Date: Mon Mar 13 2006 - 17:10:41 CET

Sebastian Gottschalk <seppi@seppig.de> wrote:
> >> You cannot detect arberaty tunneling techniques.
> > Not easily. But you can.
> Not easily == with exponential effort, so actually not at all

I cannot see an algorithm wich can solve this problem. As a matter
of fact, I think I can show that this problem is equivalent to the
halting problem. It's just the same problem as detecting arbitrary
encoding.

Because there is no such algorithm, I cannot agree that it has
exponential effort or O(e^n).

> Good tunneling cannot be differed from normal behaviour.

It can by everybody who knows the encoding. It cannot in general
by anybody who doesn't know the encoding.

Yours,
VB.

-- 
Wenn Du "Ich sehe die Mathematik als einzigen Bereich an, wo es klare
Beweise gibt." und "Ich fuehle mich in einem Anzug unwohl." als Aussagen
mit aequivalentem Meinungsinhalt betrachtest, hast Du mit Deinem Gleichnis
recht. (Michail Bachmann zu Thomas Wallutis in d.a.s.r)
Received on Mon May 1 00:56:48 2006