- FBI warns Hit Man e-mail scammer back
- 20 tech habits to improve your life
- Industry mourns slain Cisco exec
- 10 Firefox add-ons for better browsing
- Wireless LANs face scaling challenges
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:App Performance | On Demand Security | Networking Solution | SOA | Value of WDS
It's easy to see how phishing, the illegal practice of using e-mail to extract sensitive information from unsuspecting users, is becoming mainstream: Count the number of messages in your in-box that purport to be from eBay.
You also could tally the number of services on the market designed to protect in-boxes from these malicious e-mails.
According to the Anti-Phishing Working Group, in March there were 18,480 incidents of phishing reported. In April that number dipped slightly to 17,490, then rebounded to an all-time high of 20,109 in May. Much like the anti-spam market that exploded earlier this decade, the number of security companies with services designed to protect people from phishing attacks has grown rapidly over the past few years.
Compounding the problem is the fact that phishing can do serious financial damage to consumers and corporations. While spam carries its own costs in terms of bandwidth, e-mail storage and lost productivity, phishing attacks can extract data that is sometimes so sensitive it's impossible to put a price tag on it (intellectual property, for example).
Making matters worse is the fact that phishers have enough financial incentive to develop complex, obscure networks of zombie PCs to do their phishing that they are staying one step ahead of vendors.
"No one vendor can catch all the phishing attacks," not even AOL, which does the best job of protecting its subscribers, says Avivah Litan, vice president and research director at Gartner.
Nonetheless, the security market is responding. Anti-phishing products designed for consumer use have been available for a few years, such as tools from AOL and EarthLink that help protect their subscribers from the threat. Protection for enterprises has taken longer to evolve - perhaps because phishing has been viewed as a consumer problem - but today many security vendors offer phishing protection either by blocking malicious e-mail from entering users' in-boxes, or by halting access to URLs that are known phishing sites. While such features are touted by makers of Web- and e-mail-filtering software and appliances, some say the most effective way for enterprises to prevent phishing is through a hosted service that never lets the dangerous e-mail onto a corporate network to begin with.

Aging network systems and old habits have dictated how businesses spend their IT budgets. As a...
Implementing HA at the Enterprise Data Center Edge to Connect to a Large Number of Branch OfficesThis paper reviews the problem of creating a network where the dynamic availability of services is...
Enterprise Data Center Network Reference ArchitectureUsing a High Performance Network Backbone to Meet the Requirements of the Modern Enterprise Data...

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...
Harnessing the power of communications to increase workplace performanceDue to the convergence of IT and telecommunications technologies, the business workplace has been...
Stay out of the headlines: Detecting and preventing network intrusionsHow do YOU stay out of the headlines? There is no denying that risk exists in our computer-driven...

We have so many holes punched in our firewalls today that many industry insiders question the value...
IP address management in 2008 - six things to knowRead this Network World Special Brief to learn how Enterprise IT managers must update their...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.
Download the white paper.
Unauthorized applications: Taking back control
Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?
Download the white paper.
Comment