Features

December 2005

EDITOR'S NOTE

We have a problem

Ken Anderberg

The security problems associated with the Internet are coming to a head, something that has been hinted at in this space for some time. In May 2004, for example, came a warning about the “holes” and other problems with e-mail filters, which often get in the way of such communication.

In a subsequent column, Rebecca Whitener, director, security and privacy portfolio management for consulting and integration firm EDS, explained that security threats have to be stopped but management may not always be willing to loosen purse strings. She added those responsible for network security need to be more proactive in building strategies for their security needs.

The latest news is possibly even more daunting. According to Consumer Reports WebWatch, 30% of 1,501 Internet users surveyed have reduced their overall use of the Internet and 25% say they have stopped purchasing online due to security threats such as identify theft. About 53% indicate they no longer give out personal information online.

This is discouraging news for any company that uses the Internet for marketing or sales. With Web surfers becoming increasingly educated about and concerned with identity theft, credit card fraud, phishing, spyware and an assortment of security breaches, these numbers can be expected to climb, resulting in lost sales and marketing opportunities.

Also from the survey: banking sites are trusted by only 68%; and only 42% call sites where they can buy or sell stocks trustworthy, with just 36% saying the same for mortgage or loan sites. These numbers do not bode well for the future of the Web and suggest that radical changes are needed, and soon.

Current security measures taken by corporations and Internet service providers, for example, are obviously lacking when millions of consumer records can be stolen. Manufacturers of computer-related products and software, which are often the gateway for security-related attacks and scams, also need to have their hands held to the fire.

And, please, don’t anyone scream that the government needs to step in, take control or impose new legislation. The CAN-SPAM Act has done little to thwart spam and virus abuse, with such attacks greatly increasing in numbers since that law was enacted.

The answer lies in two areas, in particular. First, companies need to be more proactive in implementing existing security measures for their Web sites and local networks. While today’s solutions might not completely solve the problems, they are a start. If your company is providing minimal network security now, or waiting for the perfect security product, get a clue–it’s a long way off.

Second, security products on the market need to get better, plain and simple. Having your personal information stolen because you purchased something online is simply unacceptable. Being inundated with phishing attacks or viruses is unacceptable. Buying software with security flaws is unacceptable. As I stated in May 2004, “Houston, we have a problem.”


kanderberg@comnews.com