Data Protection

Disturbing Pattern in Workplace Social Networking

Social Networking in the Workplace – Workplace Social Networking creating security issues for corporate networks

The use of social networks by workers on the job has increased again, with usage patterns that may create new security issues for corporate networks.

Michael Stevens

July 12, 2010

Social Networking in the Workplace – Workplace Social Networking creating security issues for corporate networks

The use of social networks by workers on the job has increased again, with usage patterns that may create new security issues for corporate networks.

Trend Micro’s annual survey on such usage indicates that globally, social networking at the workplace has steadily risen from 19 percent in 2008 to 24 percent in 2010. More alarming is the fact that the users most likely to visit social networking sites do so on laptops (29 percent versus 18 percent for desktops), and laptop users who can connect to the Internet outside of company networks are more likely to share confidential information via instant messages, Web mail and social media than those who are always connected to a company network.

According to Trend Micro’s analysis, workers are likely to succeed in thwarting prohibitions on workplace visits to social networks. A better policy that prohibition, the company argues, is to allow such visits, because they are then more likely to be made over corporate networks that can cope with threats.

There is no question that threats exist and that social networks have become an viable malware distribution platforms. KOOBFACE alone, the “largest Web 2.0 botnet,” controls and commands around 51,000 compromised machines globally.

David Perry, Trend Micro’s global director of education, summed up the situation as follows: “Most companies’ concerns around social networking in the office center around the loss of employee productivity. What they may not realize is that many social networking sites are built on interactive technologies that give cybercriminals endless opportunities to exploit end users, steal personal identities or business data, and corrupt corporate networks with malware.”

Written By Michael Stevens

Latest News

Click to comment

Mapping Threat Intelligence to the NIST Compliance Framework Part 2

How threat intelligence is critical when justifying budget for GRC personnel, and for threat intelligence, incident response, security operations and CISO buyers.

Landon Winkelvoss

Password Dependency: How to Break the Cycle

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the password dependency cycle. But how can this be done?

Torsten George

Why CISOs Make Great Board Members

Cybersecurity-related risk is a top concern, so boards need to know they have the proper oversight in place. Even as first-timers, successful CISOs make for successful board members.

Galina Antova

A Change in Mindset: From a Threat-based to Risk-based Approach to Security

A threat-based approach to security often focuses on a checklist to meet industry requirements but overlooked the key component of security: reducing risk.

Marie Hattar

Secrets to a Good Security Webinar or Conference Presentation

Tips for making a presentation that will help improve the state of security programs and reflect favorably on the presenters and their companies

Joshua Goldfarb

Application Security

Source Code Security Firm Cycode Launches With $4.6 Million in Funding

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Eduard KovacsSeptember 24, 2019

Nation-State

North Korean APT Expands Its Attack Repertoire

The North Korean APT tracked as TA444 is either moonlighting from its previous primary purpose, expanding its attack repertoire, or is being impersonated by...

Kevin Townsend5 days ago