Internal Network Threat Encyclopedia
|
Promisec has announced what it calls the first encyclopedia of internal threats. The Internal Threat Encyclopedia contains both shady and clearly legitimate software that is subject to abuse. For instance, you'll find Laplink and Timbuktu in there, both straight-up remote control programs. The top 5 internal threats, according to the encyclopedia, includes (today) Google Talk, Skype and MySpace. These applications are well known for sure, but the encyclopedia entries are a handy collection of the problems each can cause. It could be useful if you need to explain why you're setting rules against one of them. |
Comments (1)
Their site is organized such that you have to page through and [perhaps] recognize some program that is in use on your system. And presumably they tested and included OS level programs that most users don't even know exist. A search by OS only provides information if that OS is part of the name of the software - thus it will find Windows Media Player if you did a search for Windows (only 2 found!).
Checking out the Skype description, it provides a lot of info about what the program will do for the user, and a lot less about how it could be a problem. It also shows that it runs on Windows, Mac, and Linux. But searching for those OS's do not indicate Skype is there. Also, it does not say which OS a specific threat will work with.
So for all practical purposes that listing provides, is is really essentially useless for someone trying to protect their network.
Or should we all assume that all net accessing prograams are corrupt and wipe them all?
Also, this blog is different than most I get directed to. It insists on a name and email address, but ONLY AFTER you try to post it.
Why don't they do like every sane place does and mark the required ones?
Posted by John Bowling | August 25, 2008 5:52 PM