INSTANT MESSAGING SECURITY
CONTENTS INTRODUCTION PURPOSE AND AUDIENCE WHAT TO EXPECT FROM THIS BOOK WHAT IS IM? IM AND ITS HISTORY IM AS AN INTEGRATED COMMUNICATIONS PLATFORM COMMON IM APPLICATION APPROACHES WHO USES IM? WHAT ARE THE ADVANTAGES OF USING IM? WHAT ARE THE RISKS OF USING IM? SUMMARY ENDNOTES HOW DOES IM WORK? HIGH-LEVEL VIEW OF IM THE PRESENCE SERVICE THE INSTANT MESSAGING SERVICE BASIC IM FEATURES ENTERPRISE INSTANT MESSAGING CONSIDERATIONS OPERATING SYSTEM DATABASE DIRECTORY SERVICES INTEROPERABILITY SCHEMA CHANGE REQUIREMENTS STANDARDS BASED FOR THIRD-PARTY SUPPORT COMPLIANCE MANAGEMENT REMOTE ACCESS COST CONSIDERATIONS AN ENTERPRISE EIM NIGHTMARE SCENARIO AN OVERVIEW OF MOBILE AND WIRELESS INSTANT MESSAGING WHAT IS MOBILE INSTANT MESSAGING? WHAT IS WIRELESS INSTANT MESSAGING? SHORT MESSAGE SERVICE WIRELESS APPLICATION PROTOCOL GENERAL PACKET RADIO SERVICE THE FUTURE OF WIM THE FUTURE OF MIM SELECTING AND SECURING A WIM SOLUTION IM STANDARDS AND PROTOCOLS EXTENSIBLE MESSAGING AND PRESENCE PROTOCOL—RFC JABBER AND THE IM COMMUNITY JABBER PROTOCOL AND XMPP ARCHITECTURAL DESIGN INSTANT MESSAGING/PRESENCE PROTOCOL—RFC SESSION INITIATION PROTOCOL SIP SECURITY EXISTING SECURITY FEATURES IN THE SIP PROTOCOL SIGNALING AUTHENTICATION USING HTTP DIGEST AUTHENTICATION S/MIME USAGE WITHIN SIP CON?DENTIALITY OF MEDIA DATA IN SIP TLS USAGE WITHIN SIP IPSEC USAGE WITHIN SIP SECURITY ENHANCEMENTS FOR SIP SIP AUTHENTICATED IDENTITY BODY SIP AUTHENTICATED IDENTITY MANAGEMENT SIP SECURITY AGREEMENT SIP END-TO-MIDDLE, MIDDLE-TO-MIDDLE, MIDDLE-TO-END SECURITY SIP SECURITY ISSUES SIP FOR IM AND PRESENCE LEVERAGING EXTENSIONS THE FUTURE OF IM STANDARDS IM MALWARE OVERVIEW INSTANT MESSAGING OPENS NEW SECURITY HOLES LEGAL RISK AND UNREGULATED INSTANT MESSAGING THE USE OF IM AS MALWARE WHAT IS MALWARE? VIRUSES WORMS WABBITS TROJAN HORSES SPYWARE BROWSER HIJACKERS BLENDED THREATS BACKDOORS EXPLOITS ROOTKITS HOW IS IM USED AS MALWARE? AS A CARRIER AS A STAGING CENTER AS A VEHICLE FOR GENERAL HACKING AS A SPY AS A ZOMBIE MACHINE AS AN ANONYMIZER IM SECURITY FOR ENTERPRISE AND HOME HOW CAN IM BE USED SAFELY IN CORPORATE SETTINGS? UNDERSTANDING IM AND CORPORATE FIREWALLS UNDERSTANDING IM FILE TRANSFERS AND CORPORATE FIREWALLS BLOCKING AND PROXYING INSTANT MESSAGING IM DETECTION TOOLS LEGAL RISK AND CORPORATE GOVERNANCE LEGAL ISSUES WITH MONITORING IM TRAF?C CORPORATE IM SECURITY BEST PRACTICES START FROM THE FIREWALL CONSIDER THE DESKTOP INSTALL PATCHES TO IM SOFTWARE ASAP ENFORCE CLIENT-SIDE IM SETTINGS IM PROXY GATEWAYS VPNS ANTIVIRUS SET UP CONTAINMENT WARDS SECURE INFORMATION WITH ENCRYPTION IM SYSTEM RULES, POLICIES, AND PROCEDURES MONITOR TO ENSURE IM CLIENT POLICY COMPLIANCE SECURITY RISKS AND SOLUTIONS FOR SPECI?C PUBLIC IM CLIENTS MSN MESSENGER YAHOO! MESSENGER AMERICA ONLINE INSTANT MESSAGING ICQ BEWARE OF IM THIRD-PARTY CLIENTS AND SERVICES HOME IM SECURITY BEST PRACTICES IM SECURITY RISK MANAGEMENT IM IS A FORM OF E-MAIL IM SECURITY AND THE LAW CYBERSECURITY AND THE LAW THE 1996 NATIONAL INFORMATION INFRASTRUCTURE PROTECTION ACT PRESIDENT’S EXECUTIVE ORDER ON CRITICAL INFRASTRUCTURE PROTECTION THE USA PATRIOT ACT OF THE HOMELAND SECURITY ACT OF IM MUST BE MANAGED AS A BUSINESS RECORD IM RISK MANAGEMENT THE BUSINESS VALUE OF IM UBIQUITOUS PRESENCE AND WORK?OW IT’S ALL ABOUT CULTURE OVERALL ROI FOR IM THE CHOICE IS YOURS THE FUTURE OF IM THE PERVASIVE NETWORK PEER-TO-PEER INSTANT MESSAGING PEER-TO-APPLICATION (THE HUMAN-COMPUTER INTERFACE) MACHINE-TO-MACHINE (APPLICATION-TO-APPLICATION) JABBER SECURITY AND GOVERNMENT COMPLIANCE THE BUSINESS IMPACT