Re: [Full-Disclosure] RES: Instant Messenger

[Über GuidoZ <uberguidoz () gmail com>]

I can't point you towards any white papers unfortunately, however I
CAN point you towards an application that I have found most useful for
securing IM conversations.

http://www.secway.fr/products/simplite_msn/home.php

The free version is for personal use and trial. Their pro version
(only around $22 USD) will encrypt just about ANY mainstream IM you
may use. Definately worth a look (for anyone) if you haven't seen it
yet. Very easy to use and setup, which I find a necessity when trying
to communicate with clients using it. (I can include the free version
in an email or on a CD to them and give them instructions to install
it.)

-- 
Peace. ~G


On Fri, 3 Sep 2004 11:42:31 -0300, Alexandre Cezar <acezar () opencs com br> wrote:
> Take a look at http://www.akonix.com for securing IM communication and
> I recommend this paper
> www.giac.org/practical/GSEC/Frank_Reiss_GSEC.pdf
>
> Regards
> -----Mensagem original-----
> De: Ido Rosen [mailto:ido () cs uchicago edu]
> Enviada em: quinta-feira, 2 de setembro de 2004 23:17
> Para: Murtland, Jerry
> Cc: pen-test () securityfocus com; webappsec () securityfocus com;
> full-disclosure () lists netsys com
> Assunto: Re: Instant Messenger
>
> Jabber.
>
> On Thu, 2 Sep 2004 10:00:18 -0400
> "Murtland, Jerry" <MurtlandJ () Grangeinsurance com> wrote:
>
> > I am looking for white papers on enterprise Instant Messenger security
> > concerns.  It doesn't have to be, but anything on MSN IM would be
> > helpful too.  Does anyone have any good resources to share?
> >
> > Jerry J. Murtland
>
> --
> +-------------------------------------------------+
> |  Email : ido () ieee org / ido () cs uchicago edu     |
> | Jabber : phaedo () jabber org                      |
> |    PGP : http://www.dork.com/ido                |
> +-------------------------------------------------+

------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------