Contradictory definitions and misunderstandings of SpIM (or IM spam) are escalating IT worries and workload without increasing security, according to ...
Contradictory definitions and misunderstandings of SpIM (or IM spam) are escalating IT worries and workload without increasing security, according to Akonix Systems Founder and CTO Dmitry Shapiro.
Unlike traditional email spam created by remote email servers, SpIM is generated by worms, adware and malware that infect other users' machines. An example is the recent Osama Found worm, which hijacked users' computers, turning unsuspecting "buddies" into "spimmers."
Unscrupulous advertisers have realized that the only large sources of SpIM are distributed via buddies, resulting in the creation of more SpIM worms. The real solution, according to Shapiro, is not stopping the SpIM messages themselves, but the malware that generates SpIM.
"These types of SpIM attacks create a substantial difference from email spam, where the vast majority of offending spammers are outsiders; in IM that trend is reversed," said Shapiro. "Generally, people not on a buddy list are prohibited from sending messages to a user until they are accepted to their buddy list."
"SpIM is an ambiguous term with multiple meanings, making it difficult to determine whether it is a real problem or just blown out of proportion," added Shapiro. "The bad news is that it's a problem that's only getting bigger; the good news is that since IM has learned from the mistakes of email and is more technologically advanced, it is easier for companies to stop SpIM by blocking the adware, worms and other viruses that hijack an IM user's buddy list to cause SpIM."
Another misunderstanding driven by SpIM's unique nature is the notion that solutions that work for email will automatically work with IM. Many standard anti-spam mechanisms, like challenge-response, duplicate the capabilities already built into the IM networks that prevent unknown third parties from contacting a user. Since most SpIM comes from existing buddies, a technique like challenge-response will only add complexity and cost to communications, without impacting the majority of SpIM on the networks today.
"Although SpIM messages have the potential to reach almost 1.2 billion by the end of 2004, the SpIM problem is more of a caution than a severe business issue at this stage," said Genelle Hung, market analyst at The Radicati Group. "IM management and security gateways, such as Akonix L7 Enterprise, are a critical platform for companies to invest in this year. Not only do they allow organizations to filter the content of IM, but they can block users altogether, slowing the growth of SpIM dramatically."
Akonix provides its customers with a comprehensive solution to productive, safe, secure and compliant use of IM in the enterprise. This includes unique features specifically created to address the real causes of SpIM. Building on its unique Dynamic Update technology, Akonix L7 Enterprise automatically protects corporate IM users from a wide range of malicious content distributed over IM, including programs such as Osama Found. Enterprise users who manage IM with Akonix's award winning L7 Enterprise are assured that they have access to the latest technology developed specifically to target SpIM and other IM threats. Unfortunately given the exploding use of IM for business these threats are only expected to multiply in the coming years.
About Akonix
Akonix is the leading provider of enterprise-class business solutions for leveraging the power of multi-network enterprise instant messaging. Akonix's award-winning products leverage patent-pending core technology, an advanced IM application development platform, and certified strategic partnerships to deliver multi-network management, security, integration and compliance capabilities across all major IM systems.
For more information, please visit: www.akonix.com