Information Technology Reference
In-Depth Information
dependent. The following examples provide a variety of perspectives on anti-spam
depending on the type and mission of the organization:
n
−
n
−
Commercial end user
Policy addresses anti-spam as anti-malware
Software provider
Microsoft
“Microsoft prohibits the use of the MSN Services in any manner
associated with the transmission, distribution, or delivery of any
unsolicited bulk or unsolicited commercial e-mail ('Spam').”
Service provider
Verizon
“Verizon specifically does not authorize the use of its proprietary com-
puters, servers, routers and computer network (the 'Verizon Network')
to accept, transmit or distribute unsolicited bulk e-mail.”
E-mail service
Xpedite e-mail service
Policy “prohibits the use of our email delivery services to send unso-
licited communications ('spam'). MediaLinq supports ONLY per-
mission-based, responsible email delivery.”
n
n
−
n
n
−
n
9.6.2.2
Practice
Knowing the problem is one thing, developing policy on what to do about the prob-
lem is another, and effectively implementing and enforcing policy is yet another.
The first decision on implementing anti-spam is in-house versus using a service
provider. Figure 9.3 provides a sample anti-spam service provider configuration.
9.6.2.3
IA
2
Perspective
One of the responsibilities of the IA architect is to think out of the box. In the
case of anti-spam, consider potential anti-spam configurations from an abstract
perspective and consider whether existing anti-spam configurations are viable. The
diagram below provides three alternative perspectives on how to approach an anti-
spam solution. None of these may exist in the marketplace; however, the point is
for the IA architect to establish multiple approaches to the solution to critically
evaluate how available products deal with a particular threat.
http://privacy.msn.com/anti-spam/ (accessed February 2005).
http://www2.verizon.net/policies/spamming.asp (accessed February 2005)
http://www.medialinq.com/spam_policy.html (accessed February 2005).
