Q&A: E-mail spam and Software as a Service (SaaS) solutions
by Mirko Zorz - Tuesday, 5 August 2008.
David Vella is the Director of Product Management at GFI with experience in quality assurance, network administration and software development. In this Q&A he provides insight into e-mail spam and Software as a Service (SaaS) solutions.

Despite an ever increasing deployment of anti-spam technologies, e-mail spam is still going strong. What technology challenges do you face in order to stay on track with the new types of spam?

Although anti-spam technology has improved enormously to prevent junk mail or spam from reaching people’s mailboxes, the industry is pitted against a foe that is at par, if not sometimes a step ahead of those designing spam filtering technologies. This is a cat-and-mouse game in which industry and spammers win some, lose some on a daily basis. Spammers are no longer interested in being a nuisance or looking to boost their egos. Today, they want a slice of a very lucrative underground market selling people’s identities and any other data that can make money.

The question we need to ask is whether the challenge is technological in nature or something harder to control – human nature. No technology is perfect and spammers will do their utmost to use these vulnerabilities to their advantage. However, it is the hard work and ability of anti-spam developers to react fast to new spam types that forces spammers to constantly seek new routes to operate in and methods to use. The challenge for developers is to come up with technology that filters new spam types as they come out and also to anticipate the spammers’ next move. This is the challenge for developers.

But developing technology is but part of the equation. The human element in email communication cannot be ignored. You can have the best anti-spam technologies around but if an end-user clicks on an email that is in the junk mail folder because he or she thinks it is important, then spammers have won another round. User education should be at the top of the list for businesses because spammers know that it is easier to fool a person than it is to bypass a spam filter.

Spam is and will continue to be a problem. It will be impossible to eradicate spam but controlling its effectiveness will depend on:

1. The anti-spam industry developing new and robust technologies as fast as possible to combat the latest spamming trends, thus reducing the effectiveness of the new spam method, and
2. End-users being told how to deal with spam and to treat emails from unknown sources or senders who never used email before (eg. banks) with extreme caution.

Software as a Service (SaaS) solutions are massively gaining in popularity and many are opting for them instead of having software solutions deployed directly. In your opinion, what are the benefits and pitfalls?

Organisations and businesses come to a crossroad as they grow. As the pressures on their IT infrastructures and services increase, most small and medium business (SMB) are faced with the choice of hosting these services in-house or looking outside the organisation to have the job done for them. What are the options for small and medium sized businesses?

Not every business or organisation has the same needs so what is of benefit to one may not be the right solution for the other. There are advantages and disadvantages to using software or hosted services and these are listed below.

Benefits of using software in-house:
1. Total manageability and visibility over data and infrastructure.
2. Processes remain in-house and secure.
3. Software can be configured to suit company’s needs.
4. No 3rd party handling of data.
5. Only authorized people have access – need to know basis.
6. Lower costs and shorter time-frame to achieve Total Cost of Ownership (TCO).

Downside of using software in-house:
1. Multiple packages can be a headache to maintain and update.


Harnessing artificial intelligence to build an army of virtual analysts

PatternEx, a startup that gathered a team of AI researcher from MIT CSAIL as well as security and distributed systems experts, is poised to shake up things in the user and entity behavior analytics market.

Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.

Daily digest

Receive a daily digest of the latest security news.

Thu, Feb 4th