- April 19, 2023: 2023 RAU weight adjustment.
- April 25, 2019: Defined application vs non-application findings.
⇤ How is User Behavior Calculated?
File Sharing activity is assessed based on the unique file appearances across unique IP addresses and vice versa.
Evaluation
File Sharing is based on the following elements:
- The number of unique torrents in the company’s infrastructure.
- The number of unique IP addresses that are associated with File Sharing findings.
- The duration of the finding, measured in days.
- The File Sharing category, which considers application findings to be more high-risk than all other File Sharing categories (non-application findings).
Each finding represents activity for a unique torrent shared through a unique IP address during 1 day.
| Description | Activity Counts (On a given day) | Number of Findings |
|---|---|---|
| 1 file is counted as 1 finding, regardless of how many times it was observed from an IP address on a given day. | 1 File | 1 Finding |
| 1 file across 4 IP addresses are counted as 4 findings; 1 finding per IP address. | 1 File, 4 IP Addresses | 4 Findings |
| 4 files in 1 IP address counts as 4 findings: 1 finding per unique file. | 4 Files, 1 IP Address | 4 Findings |
Whitelisting of torrents is available upon request. Send the torrent hash you wish to whitelist to Bitsight Support.
The overall letter grade is based on the number of times illegitimate files are shared within a company’s infrastructure, compared to all companies in the Bitsight inventory. The higher the volume of file sharing activity, the lower the grade. The grade is then normalized to account for company size.
Impact
- Weight: 2.5%
- Lifetime: 60 Days
- Letter Grade if No Findings:
– “A” Letter Grade
The rating is positively impacted if there are no File Sharing findings.