Despite the alarming statistics and doomsday warnings about spyware in recent months, Australian IT managers claim it has only hit a small percentage of their user base with few signs of malicious intent.
Mercy Health and Aged Care technical and communications manager Simon Richardson describes spyware as a nuisance and a drag on bandwidth but hasn't heard of instances of entire systems crashing locally.
Richardson manages a network of five hospitals and says only 3 percent of users on his system have been hit with spyware problems.
He admits the problem has increased when employees take laptops home to work.
"The spyware we have found so far is annoying, not malicious and we have not found any actual damage or corruption to the network, or individual PCs; but it can be missed by antivirus software," he said.
"If users are re-directed by spyware to a porn site they think they are going to be reprimanded and it puts the fear of God into them because it is unintentional; they operate by the 'Thou shalt not search porn' training regime and jump on the phone to call tech support straight away.
"As an organization we are lucky we haven't come across any malicious intent," he said but admits it may just be a matter of time referring to global statistics that show up to 30 percent of corporate systems have some form of spyware.
"The last thing I want to do is to put spyware scanners on every individual computer in the network, that's not an approach that I want to take."
Richards said one way an organization can keep track of which employee are unwittingly exposed to spyware is to go down the extreme line of comparing snapshots of the PC in question before it is given remote access to the network.
One of the most common ways for an employee to download spyware is by using a P2P file-sharing program, which bypasses normal security barriers by connecting users directly to download or swap files.
Meta group program manager Peter Firstbrook said employees are the last to know when they are infected as it occurs unintentionally when they are downloading from the Internet.
"Spyware can be merely a nuisance, clogging the network with advertising traffic or pestering the user with pop up ads, but often it is used to collect personal information about the user and which sites they are visiting," Firstbrook said.
Antivirus software and Web filters are successful in blocking some spyware content; however, those looking for blocker programs online are advised that some of these install even more spyware.
Gartner analyst Steve Bittinger said for a network to be truly guarded against spyware an organization has to seriously consider personal firewalls.
"People are looking at external perimeter security but that is just not good enough," Bittinger said
"An organisation needs to have a well architected internal security and prevention system as it is difficult to prevent staff members connecting to a network via a PDA or laptop."
Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Vignette Announces 2008 Excellence Awards 2008-11-21 10:50:00+11
PGP and Ponemon Institute Unveil Inaugural Australian Data Breach Study 2008 2008-11-20 17:34:00+11
Symantec Cloud Services Transform Data Centre Operations Through Proactive Management 2008-11-20 12:06:00+11
Verizon Business Offers Tips to Building a Successful Unified Communications and Collaboration Plan 2008-11-20 12:04:00+11
AARNet Brings 4K Digital Cinema to Australia: First 4K HD Video Signal delivered into Australia by AARNet 2008-11-20 12:02:00+11
Still Sneaking In: The Threats Your Security Tools Aren't Telling You About
Web 2.0 applications are all the rage, offering us tremendous value when it comes to collaboration and communication. They also open us up to new kinds of attacks however, and can cause problems in keeping systems and data secure. Read on to learn about the new attack methods and how you can defend yourself and your business.









