Best practices for instant messaging in business

Abstract

Instant Messaging (IM) has evolved from a tool for computer experts to rapidly exchange vital information to one of the most commonly used communication mechanisms across the globe. But the security hazards IM brings with it have not been addressed. Instant Messaging (IM) has escalated amongst business users, but IT security departments have not got to grips with the threats which the technology brings. It is estimated that today there are more than 150m unsecured public IM service users in the workplace - a figure due to double by 2008. IM has grown into one of the main communication channels round the world, but until recently many IT departments have maintained a hands-off policy and have even ignored IM usage and its proliferation by the users within their own companies. Attacks are coming from a variety of angles. Last month a worm resembling ‘Kelvir’ on Microsoft's IM network was found in AOL's IM system. IM-borne viruses and worm outbreaks such as the recent ‘Kelvir’ and ‘Bropia’ worms are on the rise. The file sharing capabilities within IM make it easy for users to bypass traditional security measures and e-mail policies. But measures can be taken to significantly reduce the risk.