P2P updates?

Comodo Internet Security - CIS Added/Rejected Wishes - CIS
#1

i had experience with symantec corporate - it has such feature - central local antivirus server
but
i had an problem with hole in windows - the hole was used by some worms
and network was almost completely blocked
and in this situation symantec corporate was
helpless and hopeless … because the central server was unavailable …

i was system administrator and i know that to maintain reliable server in virused environment
is nightmare and is too difficult …

instead i would suggest comodo the next idea :
what if it was possible to download updates from the next computer in the network ?
i think if someone can make updates to be download in peer to peer mode…
(i mean every comodo instance to be a peer to peer server for updates)
it would be some advantages i think .
at least reliability of providing updates would increase significantly …
and the problem with small network with bandwidth restrictions would be
solved automatically …

of course there is some difficulties in this
for example it is possible to spread fake updates and compromise
comodo but perhaps there could be solution - for example before
downloading from somewhere updates the client should contact comodo
to check some md check sums to ensue that updates are genuine
or the users could create list of trusted friends from which to download updates
i think this idea is not bad

and second something that comodo should think about (if it not already does -
i hope this note is not needed because comodo had already taken needed measures)
for example i have suspicions that some antivirus could be interfered by some network
activity that could spoil antivirus performance.
so comodo should think about ways comodo antivirus to protect itself form
such interference .

thanks
best regards

#2

Can CIS use P2P technology to increase overall network performance and make the update process faster?
Example:

  1. some computers/servers have updated their signatures (doesn’t matter how many);
  2. you got a “Allow P2P update downloads” switch;
  3. CIS checks the update data’s informations from the server anyway (hash, md5, etc. +version info i guess);
  4. if “Allow P2P update downloads” enabled (checked), it’ll use that method first (if no peers around, then the server);

There shall be a specific rule in CIS to enable this update process (a default one or should be available if i allow P2P update downloads). ALSO, there must be a “Allow P2P update uploads” checkbox, so the user can decide if he wants to participate in this P2P update process.

Economy = yes, less hardwares and resources needed at center;
Efficency = yes, faster update process (more sources, faster locations, etc.);
Security = yes, CIS can check hash infos before the actual update process, CIS defends the user from other P2P connections if needed;

#3

+1

#4

+1

#5

i am glad that this idea seems to be useful :))
and other- perhaps if updates are digitally signed by comodo
there will be no need to contact the center to ensure genuine updates
if of course digital signature is reliable enough and not too expensive

then for small isolated networks will be enough to find updates some way , install them to one of
computers and that`s it …

thanks best regards :)))

#6

+1

#7

definitely +1

#8

i added poll
this could be useful