Peer-to-peer: a word about P2P networks

Security on P2P (Peer-to-Peer) Networks

Peer-to-Peer networks are some of the most popular online communities on the internet. P2P networks (also known as file sharing networks) allow users to connect to each other via software and share media (music, video, images, etc...). Tens of millions of users globally can be connected to each other at one time. Furthermore, basic versions of P2P software are often free and easily accessible.

All this sounds great for exchanging files quickly and having choice, but P2P networks also bring their own set of security concerns however.

1) Viruses and other malware

Malware (viruses, spyware, worms, etc...) can be embedded in most file types, including music, video, and images (that's right, just a .jpeg can have malicious code in it!). You need to be as responsible as possible when downloading files.

You should make sure the filename extension (file type) matches up with the media type you are searching for [e.g. don't download an application file (.exe) when you are looking for an image (.jpeg)]. Filename extensions are typically appended to the title of the file (e.g. David_Hasselhoff_Drunk.mp4). For security reasons, avoid downloading the following file types: .exe, .scr, .lnk, .bat, .vbs, .dll, .bin, and .cmd.

If you're still not comfortable distinguishing file types after that summary, you need to do some background reading before you join a P2P network as you are realistically much more susceptible to getting malware .

Also extremely important, you always need to be running anti-virus and anti-spyware on your computer. Before you open up a file, make sure it is scanned by your security software. Another important security feature is to always use a firewall (either software or hardware). This will give you an added level of protection.

2) Downloading unexpected and mislabeled material

On P2P networks, many malware spreading bad guys have figured out that if they mislabel their files ("Paris_Hilton_Sextape" or "Dhasselhoff_Drunk"), they can get users to download and run malware on their computer. The user may think the file just doesn't work correctly, when in fact it's working perfectly but is just deceivingly labeled.

3) Downloading and sharing Copyrighted material

This is likely a larger concern if you have a very large media library. Many materials shared on P2P networks are copyright protected, and get transferred to and from computers illegally. Record and film companies have been particularly active in tracking and prosecuting pirated materials. While you are probably only at risk of being prosecuted if you have a huge pirated library, it is illegal non-the-less to download and/or copy materials which are copyrighted, and it's something you should be aware of.

4) Sharing files you don't want to share

Upon installation with many of these P2P programs, they allow you to share (give access to other users) folders of your choosing. If you are not careful about reading the directions and setting up the software, you may be sharing more files than you intended to share (perhaps your entire My Documents or main folder). The point is, you need to look closely to only share files that are not personally identifying or sensitive.

5) You may be connected to the network all the time

Upon installation there is often an option on P2P software that says something like "run upon starting computer"... this means that the software will run every time the computer is on and will not disconnect until your do so or turn the computer off. This may slow down the speed of your computer (if many people are connected to it to download files). An option you can choose with your P2P software is to only connect upon request (there should be options upon installation, and under "options," "tools," or "connections").

In parallel, when you are done using the network, you can disconnect it to end the session. A word of advice: if you just click the "x" box on the window, that will not end your session, you need to right click -> "disconnect" or "exit" on your system tray or use "file"-> "disconnect" from the P2P software window.

Rate this article

Questions about this topic? Ask them on our Contact Us page.

Bookmark this page