Re: Software that scans for SSN

[Jeff Kell <jeff-kell () UTC EDU>]

Lee Weers wrote:
> After thinking on this further, I have submitted a plug in request to
> Packeteer to look for SSN and credit card numbers so that the packets
> can be discarded at the packetshaper.  I would think they should be able
> to do this with their deep level of packet inspection they always state.
> I also suggested a discard only rule so to not allow the harvesting of
> the information.

Umm... take a shot at cobbling together a few snort signatures to look for SSN or credit card patterns and throw traffic at 
it for an hour or two.  You'll be overwhelmed with false positives.

If you are running a personal firewall and want to look for *specific* SSNs or credit cards (yours or your families) 
that's a much more feasible possibility, and indeed an option in some packages.

In fact, there are a few snort rules for SSNs/CCs; check the rulesets at bleedingsnort.com, specifically 
bleeding-policy.rules, sids 2001375-2001383.

Jeff