What does the future hold for fighting spam? My two-part interview with Jamie de Guerre, CTO of Cloudmark, concludes today.

How do you see Cloudmark evolving? I know that you issue periodic updates to the software - what have you been doing to improve the product?

For e-mail threats, Cloudmark is continuing to innovate. This includes several new road map areas:

1. Cloudmark Sender Reputation
Cloudmark just launched the Cloudmark Sender Reputation Service, a feature shipping on our edge mail transfer agent (MTA) solution, Cloudmark Gateway. This service identifies _sources_ of spam almost instantly around the globe, including rapidly evolving botnets. Cloudmark’s solution traditionally worked at the content layer by filtering messages based on the contents of the message and identifying messages sources in the Cloudmark Global Threat Network as spam, phishing or virus.

2. Outbound Protection, Zombie Identification and Remediation
Cloudmark will be offering service providers a Zombie Identification Service that identifies and remediates bots within their network.

3. Cloudmark ActiveScan
Cloudmark ActiveScan enables highly efficient rescanning of messages - so that even if a spam message gets through initially, Cloudmark can still take action on it as soon as the spam is discovered.

In addition to these improvements in Cloudmark’s e-mail security solutions, we are expanding into other messaging markets that need the same leading edge security that Cloudmark provides for e-mail. The first of these markets is mobile messaging. In many parts of Asia, people already get more spam on their mobile phone over Short Message Service (SMS) than they do in e-mail. This problem is going to grow elsewhere with the growing popularity of mobile messaging and as mobile-service providers enable new services like mobile e-commerce.

Cloudmark’s solution is flexible in filtering any messaging threat. Therefore, Cloudmark will evolve into other new markets that are also start to have security issues and are increasingly attacked by spammers, phishers and other attackers. Stay tuned - you may hear some announcements in this area soon.

How do you see the battle against bots? Are you focusing on outbound spam?

Yes, as part of Cloudmark’s sender reputation strategy, we are working to identify zombie PCs and providing a real-time Zombie Identification Service to operators as part of our outbound protection offering. We are also partnering with several companies that provide automated remediation solutions and transparent proxy solutions that can filter outbound spam sent on networks that have not closed port 25 (i.e., open spam relays).

M. E. Kabay, PhD, CISSP-ISSMP, specializes in security and operations management consulting services. CV online.