StORES Magazine - September 2007 - (Page 111) NUTS AND BOLTS / SPAM Less Screaming, More Screening Messaging security platform protects Burlington Coat Factory from the cyber elements BY M.V. GREENE sistent HTML pattern, image spam is typical of how spammers currently operate, Marchione says. “They’ve become much more sophisticated and much more prevalent, and you’re seeing a major increase in volume,” he says. “They’re always out looking for the latest operating system vulnerability to … exploit.” Attack the postmaster Besides serving as a distracting nuisance, spam guzzles resources from an organization. One spamming technique, for instance, is to go after the network’s postmaster, sending spam from a non-existent person in one organization to someone in another. The message gets bounced back to the webmaster of the initial organization as undeliverable. “We have to take it back, even though we never sent it,” Marchione says. In June, the New Jersey state Senate unanimously approved a bill that would expand on provisions of the federal CAN-SPAM Act of 2003 by establishing criminal and civil penalties for activities often involved in the widespread distribution of spam. The bill would prohibit using a computer located in New Jersey to relay or transmit multiple commercial spam messages to mislead recipients or service providers about their origins. ike many organizations with sophisticated enterprise network investments to protect, Burlington Coat Factory Warehouse has drawn a line in the sand against spam. L Matt Marchione, MIS security analyst for the Burlington, N.J.-based clothing, footwear and accessories retailer, cringes at the impact of the seemingly endless, unsolicited and typically fraudulent e-mail his corporation has to contain amid the hundreds of thousands of inbound messages it receives each day. “Nuisance, junk, garbage” are the terms Marchione uses when characterizing spam. He expresses greater amazement at the misdeeds of cybercrooks who seek to contaminate corporate enterprises with viruses, parasitic malware, bots and rootkits. Then there is “image spam” illustrates what Burlington and other organizations are up against. Image spam, in which a message is embedded in wallpaper within an e-mail, is a relatively new kind of spam issue – and a troublesome one, as the embedded images are often able to bypass many spam filters. McAfee Avert Labs, a security threat and research organization operated by Spam and other network intrusions are more sinister than at any time in the past phishing, whereby bogus sign-in pages are created in an attempt to extract personal and financial information from the unsuspecting. “You’re trying to clean up the junk that finds its way into people’s inboxes and keep people productive,” Marchione says. “If they’re spending their time having to clean up all this unwanted garbage, then that is less time that they’ve got to be productive.” A recent surge in the use of so-called WWW.STORES.ORG Santa Clara, Calif.-based security technology firm McAfee, found that image spam accounted for up to 65 percent of all spam during the first half 2007, compared with 10 percent in 2005. Image spam typically is used to advertise stocks, pharmaceuticals and degrees, according to McAfee Avert Labs. The image can triple the size of an e-mail message, thus absorbing significantly more network bandwidth. As it lacks a searchable URL or a con- It would also ban registering for multiple e-mail addresses or domain names with false information to transmit spam or accessing another computer without authorization and using it to transmit multiple spam e-mails. While laws like CAN-SPAM are helpful, corporate enterprise security analysts continue to plow ahead to ensure the security of their respective networks. “There is always some kind of new little technique that the spammer can sit STORES / SEPTEMBER 2007 111 http://WWW.STORES.ORG
For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.