A Discussion of Spyware

We have secured our networks, implemented 'defense in depth' enforced strong passwords and educated our end users to report any suspicious files or activity on their computer. We have our firewall and intrusion detection systems in place. We are on top of patch management and security templates have been created and deployed. Current virus signatures are pushed out to the workstations. Then spyware has appeared. The insidious nature of spyware combined with the lack of user awareness and spyware's potential for surveillance data gathering and system hijacking pose a threat to home users and businesses. Commercial interests the technology industry consumers and legislators must combine efforts to address this threat. In the 90's network and computer security staff moved from encouraging the use of anti virus software to requiring it. We increased our efforts in educating users in the practices of 'safe computing' and many companies started providing anti virus software for use on home computers in the interest of self defense. Macro viruses and worms appeared wreaking more havoc with workstations networks and users. The combination of user education and more sophisticated and user friendly anti virus software assisted the network professionals in addressing the threats.