Home > Ask the Security Experts > Expert Archive: Information Security Threats Questions & Answers > Can companies control their affiliate-based adware?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Can companies control their affiliate-based adware?

Ed Skoudis, past SearchSecurity.com expert EXPERT RESPONSE FROM: Ed Skoudis, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 03 July 2007
Companies often advertise unintentionally with adware. How much control do they have over this? As a security professional, are there steps I can take to ensure my own company doesn't do this?

>
Ahhh, yes. Affiliate-based adware is quite a problem. Here's what happens. A trusted company with a good brand decides it wants to do some Internet-based advertising, so it diverts some money from its enormous TV and newspaper ad budget and uses it in the Internet realm. With little understanding of and experience with this type of promotion, the organization hires an Internet-based advertising company to get ads placed on various popular Web sites. This advertising company, in turn, uses other companies to push advertisements out. These companies then use other companies; they pay more individuals to create the ads, and so forth. Some of these lower-level folks might be very unscrupulous. They may put banner ads all over the place or even use spyware to inject advertisements, so they can inflate the numbers and make more money. These types of practices have embarrassed some big companies.

How much control do these companies have? Lately, many of them are being very careful in their ad contracts to make sure that their messages and brands aren't bruised by overzealous advertisers. As a security professional, it's wise to recommend that the organization's lawyers carefully review contracts with Internet-based advertising firms, making sure that the documents explicitly call out the advertising methods that will be used. The affiliate should be restricted from using spyware to display ads.

Also, you may want to encourage your company to use methods that you can control, including Google AdWords or similar services. AdWords allows advertisers to promote their wares when a product relates to a specific user's Google query. The briefly worded advertisements on Google's search pages can appear when certain ad-related search terms are typed – this is a highly targeted and useful form of advertising.

More information:

  • Learn how Zango had tried to erase its public image as a shameless adware pusher.
  • Visit our Spyware, adware and Trojans resource center.


  • BROWSE BY TAG
    Expert Archive: Information Security Threats,   Information Security Policies, Procedures and Guidelines,   Malware, Viruses, Trojans and Spyware,   Information Security Threats,   Information Security Management,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Expert Archive: Information Security Threats
    The telltale signs of a network attack
    Will Google Chrome enhance overall browser security?
    Are there antivirus suites that pick up more than just run-of-the-mill viruses?
    What tools can a hacker use to crack a laptop password?
    Are social networking sites an easy target for malicious hackers?
    What are the dangers of cross-site request forgery attacks (CSRF)?
    Should social engineering tests be included in penetration testing?
    What kind of data is compromised during a Google hack?
    Best practices for using restriction policy whitelists
    Defining mobile device security concerns

    Information Security Policies, Procedures and Guidelines
    Health Net breach failure of security policy, technology
    How to protect distributed information flows
    Whitelists, SaaS modify traditional security, tackle flaws
    Melissa Hathaway urges more cooperation, government attention to cybersecurity
    Reuters: Obama ready to select cyber security czar
    How a corporate Twitter policy can combat social network threats
    Should enterprises be concerned with Twitter in the workplace?
    Information security management hype: Debunking best practices
    Data breach avoidance begins with security basics, panel says
    Expert: Information security spending often restricts innovation

    Malware, Viruses, Trojans and Spyware
    New Zeus spam poses as Social Security statements
    Increase in Gumblar backdoors poses FTP credential problems
    Hackers to sharpen malware, malicious software in 2010
    iPhone worm Rickrolls jailbroken phones
    Israeli Mossad add Trojan Horse to Syrian laptop
    Schneier-Ranum Face-Off: Is antivirus dead?
    Modern malware, stealthy botnets, adapt quickly, expert says
    Computer worm infections up, scareware antivirus down, Microsoft says
    Web-based attacks skyrocket, pirating sites surge, security firms say
    Mini guide: How to remove and prevent Trojans, malware and spyware

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    defense in depth  (SearchSecurity.com)
    non-disclosure agreement  (SearchSecurity.com)
    security policy  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts