Security Product to Lock Down IM, P2P

CNET

June 10, 2002

A San Diego company on Monday announced a product designed to secure instant-messaging and file-sharing applications by blocking viruses, preventing data leaks, and stopping installations of back doors.

Privately held Akonix Systems developed Akonix L7 specifically to address the security concerns that are arising from the widespread use of programs such as AOL Time Warner’s AOL Instant Messenger (AIM) and the Kazaa peer-to-peer service.

Those programs give outsiders a way into a computer inside an otherwise secure network. IM programs once only allowed people to send text back and forth, but now they let people exchange data files, which can do nasty things on the recipient’s end. In peer-to-peer networks, computer users allow other people to reach into their hard drives and copy specific data, such as music files. Such programs allow data to flow through the same transmission channel on computers as Internet traffic and thus cannot be blocked.

Despite the security concerns of the programs, their use is increasing exponentially, just like e-mail did in the 1990s.

Research firm Jupiter Media Metrix estimates that more than 100 million people use some form of IM program to exchange real-time messages with friends or co-workers. And millions more swap music and other types of files over peer-to-peer networks, which were popularized by Napster, experts say.

Experts have predicted it was only a matter of time until viruses and other malicious programs wormed their way into those systems.

In May, antivirus companies warned of a virus, dubbed Benjamin, that was being spread to Kazaa users. Last week, a study from Hewlett-Packard revealed that misconfigured Kazaa software could expose sensitive files on someone’s hard drive to other people.

“Instant messaging puts a big old hole through our firewall as far as viruses getting through,” said Mike Irick, assistant director of academic computing at California State University at San Marcos. “I’ve had a few viruses get through.”

To keep viruses from hitting professors’ and students’ computers at the school, Irick is beta testing Akonix L7, which sits at the perimeter of an organization’s network. It monitors and logs the traffic, scanning it for viruses and other malicious code.

Visit the Akonix web site

Read the full article from CNET