Is Malware Social Media Monitoring's Elephant in the Room?

01/14/10

Permalink 11:32:39 am, by jfiore English (CA)
Categories: Opinion

Is Malware Social Media Monitoring's Elephant in the Room?

We often describe topics that are awkward or uncomfortable to talk about with others in a social setting as "elephants in the room." They are weighty and heavy topics requiring a thoughtful and attentive exchange of ideas and opinions to stimulate

the kind of discussion capable of teasing out working solutions. Overlooking or ignoring the elephant is never a wise thing to do.

Over the last few years we have been noticing a significant absence of dialogue concerning malware threats and its potential hinderance on social media monitoring. A recent Cisco report touches on this topic in an effective way and I would suggest visiting the link to read more on the topic. There are many important insights to draw from the posts interview format, but the one quote which really caught my attention was this:

"So a couple of things here strike me. One that strikes me is that the criminals obviously are going where consumers are going. Consumers want more online banking, the criminals are going there; the consumer wants to be active in social networks, the criminals are going there."

After reading this statement, it makes logical sense that threats of malware will follow us in areas of the Web where consumer conversations are most likely to happen. If the threat of their potential emergence hinges on the people factor, Twitter, Facebook, LinkedIn, blogs and every corner of the online terrain, wherever people are likely to meet and converse can potentially become targets and primary places for suspicious activity.

Taking this concept toward the path of logical conclusion, if the goal of monitoring is to catch every online mention, it will not be a question of how or why, but when and if we are capable of responding to the attack quickly and effectively when it happens. Overlooking its importance now will inevitably arouse an untenable level of scrutiny directed at vendors, consultants and firms offering monitoring solutions and services. Unless a dialogue exists where we can trace and pick apart the types of suspicious activity going on in social media, we can't possibly understand what hit us, much less be able to reason or explain how it was allowed to happen.

In the last year, there has been a noticeable and overarching preoccupation with measurement and ROI, and if real effort and investment is being earmarked towards making advancements in the brand reputation and social media monitoring industry, then the threat of malware in social media is an important topic we cannot afford to exclude.

In the interest of initiating the dialogue, I will link share a past post where we talk about something we call malware-roulette (7th paragraph from the top). We've also voiced our concern with url shortening services. In the past year, we announced our move towards using our own proprietary url sharing service because we had noticed several of our past tweets being flagged as suspicious when appearing in Google search results.

Since 2008 we have put in place a quarantine area where suspicious link activity can be safely stored and analysed by our team. None of these incidents appear in our client consoles. We do report more serious cases to our clients in the interest of keeping them informed and for preventative reasons, on the off-chance they happen to stumble on these incidents while surfing the Web outside of our system. Both the quarantine and reporting mechanisms help to ensure the effective monitoring of patterns suggesting the online replication or mirroring of incidents. The single best ally to safeguarding our subscribers from malware threats is our offering of human review. This step on its own is what allows us to effectively sniff out and block any/all incidents that computational algorithms, filters and machine logic aren't suitably equipped to detect.

We'd like to hear your opinions, suggestions and even working models that have effectively helped you remove the threat of malware from the task of social media monitoring.

Post on Twitter


Site Meter

Comments, Pingbacks:

Comment from: Steve Dodd [Visitor] Email · http://www.twitter.com/steve_dodd
Joseph, it's a huge issue and the trends are proving that it is only going to get worse. Unfortunately, until there are serious financial consequences (ie: ROI) as we've previously experienced with Identity Theft and email spam, it will not get the attention it needs. Right now, Social Media in general is easy pickings for fraudsters.
The steps you've taken are admirable but more attention is needed across the board.
PermalinkPermalink 01/14/10 @ 12:46
Comment from: jfiore [Member] Email
Steve, I've seen your name appear in comment steams on this topic, with views very similar to mine. If it is apprehension or complacency that is coming in the way of taking serious and concerted action, let's hope our advocacy on the topic and posts like this act as the much needed spark.

Thanks for stopping-by and sharing your comment Steve!
PermalinkPermalink 01/14/10 @ 12:54
Comment from: autom [Visitor] Email · http://autom.x.iabc.com
"Unless a dialogue exists where we can trace and pick apart the types of suspicious activity going on in social media, we can't possibly understand what hit us, much less be able to reason or explain how it was allowed to happen."

you are clearly part of the movement that is encouraging this dialogue. and i also agree with you that more concrete, actionable measures need to take place to address this looming issue NOW rather than wait for white elephants to start sitting on directors in board rooms just to hit them over the head and make them realize that proactive (not reactive) action MUST be the order of the day.

it boggles my mind how we've historically seen this all too typical sit-n-wait approach when dealing (or not) with the malware that also burgeons exponentially as an expected function of all other advancing technologies..and yet, the overall behaviour seems unchanged..it's more than disappointing, it's actually quite worrisome

kudos for bringing this issue to the fore, my friend. only those who really care enough about the long term will sincerely put effort into making a difference. it would appear that those who share this sentiment are few and far between
PermalinkPermalink 01/14/10 @ 18:05
Comment from: jfiore [Member] Email
Thanks Autom! I quite like your artful manner of describing the elephant sitting in the board room knocking heads. We also share the same sentiment on both the mind-boggling part, and on the concern that if it continues to advance in an unfettered way, it's the kind of threat that will eventually have directors ducking under their desk to hide, and will make even some of the best online reputation attacks we know today seem like a walk in the park.
PermalinkPermalink 01/14/10 @ 18:18

This post has 1 feedback awaiting moderation...

Leave a comment:

Your email address will not be displayed on this site.
Your URL will be displayed.

Allowed XHTML tags: <p, ul, ol, li, dl, dt, dd, address, blockquote, ins, del, span, bdo, br, em, strong, dfn, code, samp, kdb, var, cite, abbr, acronym, q, sub, sup, tt, i, b, big, small>
(Line breaks become <br />)
(Set cookies for name, email and url)
(Allow users to contact you through a message form (your email will NOT be displayed.))

RepuTrack™

RepuTrack™ monitors online media from Web sites, blogs, message boards, forums, chatrooms, microblogs, social networking sites, video and images worldwide.

To schedule a free online-demonstration of RepuTrack™, click here.

RepuTrack™ - Online Reputation Monitoring

September 2010
Sun Mon Tue Wed Thu Fri Sat
 << <   > >>
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30    

Search

Categories

Misc

XML Feeds

What is RSS?

Who's Online?

  • Guest Users: 29