Security UPDATE--Spam Is Good for Antispam Vendors--June 14, 2006

1. In Focus: Spam Is Good for Antispam Vendors

2. Security News and Features

- Recent Security Vulnerabilities

- Microsoft Releases Rebranded Antigen Products

- 180solutions Merges with Hotbar, Renames Company Zango

- Two-Factor Authentication Tokens

3. Security Toolkit

- Security Matters Blog

- FAQ

- Share Your Security Tips

4. New and Improved

- Host-Based IPS Monitors Application Behavior

==== Sponsor: St. Bernard Software ====

Get the #1 Ranked Internet Filtering Appliance Free

iPrism, ranked #1 by IDC, gives you comprehensive protection from Web-based threats at the perimeter - spyware, IM and P2P are stopped before they can invade your networks. Now, get the appliance at no charge when you purchase a multi-year subscription. This is a limited-time offer, so get a Quick Quote today.

http://www.stbernard.com/forms/quickquote/quote_ip_sp.asp?oc=482

==== 1. In Focus: Spam Is Good for Antispam Vendors ====

by Mark Joseph Edwards, News Editor, mark at ntsecurity / net

Last week, I wrote about Okopipi--the current successor to Blue Security's Blue Frog antispam service. In closing that article, I described a dream situation in which Microsoft philanthropically backs the Okopipi project and bundles the antispam solution with every copy of Windows. This week, I'll point out some statistics and financial figures that show why I think that dream will never become a reality--not with Microsoft or any other major antispam-solution provider.

First, let's look at the cost of spam for businesses: In February 2005, Ferris Research said, "Lost productivity and other expenses associated with spam will cost US businesses $17 billion in 2005.... Worldwide costs could reach $50 billion, primarily because of lost employee productivity. Not included in these figures are immeasurable items, such as the missed opportunity cost of a new customer order that's incorrectly discarded as spam." That's a lot of incentive for businesses to implement antispam solutions.

http://www.ferris.com/static/about/Global_Spam_PR.php

Next, let's look at antispam-solution revenue figures: Also in February 2005, IDC predicted that "...worldwide revenue for antispam solutions will exceed $1.7 billion in 2008, far surpassing the $300 million generated in 2003.... \[The\] development of spam from a mere nuisance to an increasingly serious problem \[is\] the driver for explosive revenue growth, innovation, and investment in the antispam market. The worldwide revenue for antispam solutions will experience a compound annual growth rate (CAGR) of 42% through 2008."

http://www.idc.com/getdoc.jsp?containerId=prUS00085505

Now let's look at email usage and spam volume growth: In January 2006, the Radicati Group estimated that there were more than 1.2 billion active email accounts. Worldwide email traffic per day was about 135 billion messages, of which 67 percent were spam. Then in May 2006, Radicati estimated that there were nearly 1.4 billion active email accounts and worldwide email traffic per day of about 171 billion messages, of which 71 percent were spam.

http://www.radicati.com/uploaded_files/news/Q4-2005_PressRelease.pdf

http://radicati.com/uploaded_files/news/Q1-2006_PressRelease.pdf

Summarizing Radicati's data, the number of mailboxes increased by 200 million, the volume of email traffic increased by 36 million messages, and the volume of spam increased by 31 million messages--all in less than half a year! The increases represent a tremendous gain in potential customers for antispam vendors, which of course can readily equate to huge increases in revenue.

The spam problem has given birth to a billion-dollar market for antispam-solution providers. If we keep in mind that most companies exist for the primary purpose of generating income for their owners and investors, then we can easily see that no current antispam vendor has the impetus to stamp out spam because doing so would run counter to its fiduciary responsibility.

Therefore, the Okopipi project will probably not be seen in a good light by any antispam-solution provider, except of course one that finds a way to profit from the ultimate antispam solution of stamping out spam completely.

==== Sponsor: PatchLink ====

Does your patch management solution automatically track and re-deploy to ensure network security?

20% of patches unknowingly become un-patched. Learn more about automating the analysis, distribution and tracking of security patches using PatchLink's security patch & vulnerability management solution -- the world's largest repository of tested patches. Request a free trial disk.

http://a.gklmedia.com/pnsecurity/nl/148

==== 2. Security News and Features ====

Recent Security Vulnerabilities

If you subscribe to this newsletter, you also receive Security Alerts, which inform you about recently discovered security vulnerabilities. You can also find information about these discoveries at

http://www.windowsitpro.com/departments/departmentid/752/752.html

Microsoft Releases Rebranded Antigen Products

Microsoft announced the first release of its rebranded Antigen antivirus and antispam products for email systems. Microsoft acquired the Antigen product line with the 2005 purchase of Sybari Software. Read more about the Microsoft versions at

http://www.windowsitpro.com/Article/ArticleID/50517

180solutions Merges with Hotbar, Renames Company Zango

The often scrutinized adware company 180solutions announced that effective immediately it will merge with Hotbar and rename the newly combined entity Zango.

http://www.windowsitpro.com/article/ArticleID/50537

Two-Factor Authentication Tokens

Two-factor authentication offers stronger security and easier access than having to remember numerous passwords. Our buyer's guide helps you find the right two-factor solution to fit your needs.

http://www.windowsitpro.com/Article/ArticleID/49938

==== Resources and Events ====

Win a new iPod (for Mac or PC)

Download a Windows IT Pro podcast on Windows IT Pro Radio by your favorite author, editor, or industry figure. You'll automatically be entered to win!

http://www.windowsitpro.com/podcast/

Maximize your VoIP environment by integrating FoIP technology to increase ROI and streamline processes.

http://www.windowsitpro.com/go/toolkit/faxback/?code=0614emailannc

Attend Black Hat 2006 in Las Vegas July 29 - August 3; 2,500+ international security experts, 10 tracks, no vendor sales pitches.

http://www.blackhat.com

Pop Quiz! Can you pass the Windows Server High Availability Challenge? Find out, and you could win a Video iPod.

http://popquiz.windowsitpro.com/neverfail

How will compliance regulations affect your IT infrastructure? Help design your retention and retrieval, privacy, and security policies to make sure that your organization is compliant. Download the full ebook today!

http://www.windowsitpro.com/go/ebooks/sherpa/compliance/?code=0614emailannc

Attend TechDays 2006--two days of technical training for IT Professionals on Microsoft and Cisco Technologies, Fri. 6/23 and Sat. 6/24 from 9am-4pm (both days). Located at Diablo Valley College, Pleasant Hill, CA. Price is $1299. Your cost is $299 and includes lunch, drink, snacks and all the information your mind can hold! Enter code PENTON when you register at

http://www.pacitpros.org/event-signup.php

==== Featured White Paper ====

Extend Windows Rights Management Services (RMS) to support enterprise requirements for protecting information, including proprietary business data.

http://www.windowsitpro.com/go/whitepapers/liquidmachines/rightsmgmt/?code=0614featwp

Bonus: When you download any white paper from Windows IT Pro before June 30, you'll be entered to win Bose Triport Headphones. See the full selection today at http://www.windowsitpro.com/whitepapers

==== Hot Spot ====

Spending too much time monitoring security alerts?

New Activeworx Security Center v3 collects event logs from all of your various security devices (Firewalls, AV, IDS, etc) to provide a single dashboard view. ASC includes real-time correlation and analysis, alerts, built-in compliance reports and deep forensics. Free white paper, webinar and evals available.

http://www.crossteccorp.com/activeworx/?utm_source=WinITPro&utm_medium=newsletter&utm_campaign=0614hotspot

==== 3. Security Toolkit ====

Security Matters Blog: Windows Genuine Advantage, Phone Home

by Mark Joseph Edwards, http://www.windowsitpro.com/securitymatters

We should have known: Microsoft's Windows Genuine Advantage tool phones home daily, and that fact isn't disclosed in the End User License Agreement (EULA). Find out more in this blog article on our Web site.

http://www.windowsitpro.com/article/ArticleID/50533

FAQ

by John Savill, http://www.windowsitpro.com/windowsnt20002003faq

Q: How do I enable logging of file screen violations?

Find the answer at http://www.windowsitpro.com/article/ArticleID/50479

Share Your Security Tips and Get $100

Share your security-related tips, comments, or problems and solutions in the Windows IT Security print newsletter's Reader to Reader column. Email your contributions to [email protected]. If we print your submission, you'll get $100. We edit submissions for style, grammar, and length.

==== Announcements ====

(from Windows IT Pro and its partners)

Summer Special--Save 58% off Windows IT Pro

Subscribe to Windows IT Pro today and SAVE 58%! Along with your 12 issues, you'll get FREE access to the entire Windows IT Pro online article archive, which houses more than 9,000 helpful articles. This is a limited-time offer, so order now:

https://store.pentontech.com/index.cfm?s=1&promocode=eu2066uw

June Special--Save $80 off the Windows IT Security newsletter

Get endless solutions for building and maintaining a secure enterprise. Subscribe to the Windows IT Security newsletter today and save $80:

https://store.pentontech.com/index.cfm?s=1&promocode=eu2566uy

==== 4. New and Improved ====

by Renee Munshi, [email protected]

Host-Based IPS Monitors Application Behavior

S.N. Safe & Software recently released the Safe'n'Sec host-based intrusion prevention system (IPS). Safe'n'Sec intercepts application calls at the OS level, granting or denying system access to an app based on a variety of criteria, such as the app's hard disk location, the existence of a digital signature for the app, and whether the app is on a list of core "safe" applications. Safe'n'Sec vets periodic updates to core apps, and Safe'n'Sec users can define policies to govern the behavior of apps. The version for small to midsized businesses (SMBs), Safe'n'Sec Business, offers antivirus and antispyware protection and centralized remote and corporate network administration. For more information, go to

http://www.safensoft.com

Tell Us About a Hot Product and Get a Best Buy Gift Card!

Have you used a product that changed your IT experience by saving you time or easing your daily burden? Tell us about the product, and we'll send you a Best Buy Gift Card if we write about the product in a Windows IT Pro What's Hot column. Send your product suggestion with information about how the product has helped you to [email protected].

==== Contact Us ====

About the newsletter -- [email protected]

About technical questions -- http://www.windowsitpro.com/forums

About product news -- [email protected]

About your subscription -- [email protected]

About sponsoring Security UPDATE -- [email protected]