Research and retrieval of news articles by:
Bennett Gold LLP, Chartered Professional Accountants

SPECIAL NOTE TO ALL VISITORS:
Effective December 31 2012, articles are no longer being updated on this web site.
The site is now maintained as an historical archive, covering notable e-commerce news articles from the period 1999 to 2012.

INSTANT MESSAGING THREATENS SECURITY

Posted on November 9, 2001

      Companies are warned that employees using instant messaging programs could be less productive and at risk from viruses. Security experts have warned companies that increased use of corporate instant messaging services could increase vulnerability to virus attacks and the interception of messages.

      Yahoo! and Sun Microsystems have both announced that they will release instant messaging (IM) software for corporate use, and Microsoft has said that IM will play a large role in its .Net strategy for accessing applications online. Yahoo! said its IM service will let employees send messages behind the corporate firewall, but will also integrate with other systems and the Internet to allow real-time communication across global locations. Sun's messaging service will also work behind the firewall, the company said.

      Though at present there are only a few instant messaging worms, Denis Zenkin, the head of corporate communications at antivirus specialist Kaspersky Labs, warned, "It is only a matter of time for virus writers to get interested in this application. If this technology becomes as popular as email we will certainly see numerous worms, using social engineering methods and exploiting vulnerabilities in instant messaging or similar programs." Many companies have banned the use of IM software because of concerns that infected messages can bypass server-based antivirus security, and because they fear that IM could reduce productivity. Zenkin emphasized that firms should consider the threat from the inside. "Any new information technology being integrated in the enterprise-wide network makes the whole system more vulnerable to virus and hacker attacks."

      Firms should be aware that the level of protection offered against viruses and message interception for IM is not as advanced as for email, said Eric Chien, chief researcher at security giant Symantec.

      Chien said no antivirus products protect against IM at email server gateways. Antivirus technology for IM is under development but in the meantime firms should set usage guidelines. "With the lack of tried and true security for instant messaging, policy plays an even larger role," Chien said. "Users should be reminded that they should not utilize any unexpected attachments that come via instant messaging. Administrators should consider disabling file transfers via instant messaging altogether."

      Kaspersky's Zenkin added that companies using IM software should strongly encrypt any messages to ensure that if they are intercepted, they cannot be read, and also regularly update their antivirus software.

E-Commerce Alerts are issued by Bennett Gold LLP, Chartered Professional Accountants as situations develop. Bookmark this site and check back often. Our e-mail address is: info@BennettGold.ca

In accordance with United States Code, Title 17, Section 107 and Article 10 of The Berne Convention on Literary and Artistic Works, the news clippings on this web site are made available without profit for research and educational purposes.

ALERT
ARCHIVES
Final Entries
2012
2011
2010
2009
2008
2007
2006
2005
2004
2003
2002
2001
2000
1999