Strangely enough, a new security report from ScanSafe, talks about compromised legitimate sites that are now hosting re-directors for phishing scams (purportedly trying to look like Bank of America), so they can bypass reputation filters.
Both ScanSafe and Ironport are of course owned by Cisco, so it's interesting to see ScanSafe put down a technology that Ironport talks up as one of their strengths.
The fact that reputable sites can get compromised has always been a reason to avoid reputation filters for web security. Reputation may work well for email security, but it just doesn't translate to web security in the same way.
Welcome to the Proxy Update, your source of news and information on Proxies and their role in network security.
Monday, July 19, 2010
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment