EDS bans IM

Big hammer, small nut

  • alert
  • submit to reddit

EDS, the computer arm of the British government, has banned its staff from using Instant Messenger products in the workplace. It cites security concerns, especially over virus transmissions.

A memo to staff from EDS' security compliance unit leaked to The Register describes "use of Instant Messenger (IM) products through the Internet" as a "risk to Client EDS' infrastructure and network".

The company will block access to public Internet instant message sites at its firewalls from tomorrow (May 8).

Security staff can make exceptions to the rule but the policy means that from tomorrow EDS staff will be unable to use popular IM products such as AOL, ICQ and Yahoo!

Gateway AV tools or managed services providers can be used to block infectious emails before they reach end users, but instant messages go directly to workstations - so skipping a layer of defence.

IM is convenient but it can create holes into an organisation. Instant messaging attacks have become a common method of propagation in recent viral outbreaks, and (as CERT warned back in March) a tool for social engineering, including tricking users into running malicious software (potentially DDoS attack tools) on their machines.

Neil Barrett, technical director of security consultancy firm IRM, said IM products are "implicitly clandestine" and make the exchange of files easier - something likely to be frowned on by security-conscious organisations.

EDS is not noted for its lightness of touch with staff - and it hasn't always been so cosy with the UK government. In 1986, the company was found out ordering staff, American nationals, to lie to British immigration officials. The staff were told to say they were coming to the UK on holiday, when in reality, their real purpose was to work. That cost EDS one measly UK government contract - or, to be precise, the chance to bid for one contract. ®

Related stories

Instant message, cracker tricks
Klez worm infects and infuriates
ICQ hack theories flood into Vulture Central


Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.