SurfControl launches Skype security

Internet content protection solution provider, SurfControl has released a Skype security application to protect against potential VoIP threats.

The software, offered via the SurfControl Enterprise Threat Shield, detects and controls unauthorised usage on corporate networks of the notoriously insecure VoIP application.

Skype’s VoIP streams are encrypted in such a way as to render information above the IP level unreadable. Skype file transfers and IM are likewise encrypted.

Max Rayner, SurfControl CIO said Skype is an unmonitored, largely anonymous P2P protocol service, meaning that the person you’re calling, or receiving calls from, can introduce threats – such as worms and viruses – into the network and no one would know.

“It also allows undetectable file sharing and IM, greatly facilitating the ease at which the transfer of company confidential information and intellectual property can leave the organisation. No anti-virus product on the market is capable of monitoring user behaviour,” he said.

SurfControl Enterprise Threat Shield (ETS) has the capability to target and remove the Skype application when found on the company network as well as prevent its installation and use within a restricted company environment, SurfControl said.

ETS enables organisations to customise network policies to limit its use to authorised employees and only during authorised times of day.

ETS also controls the use and duration of a Skype-based call, and prevents the use of Skype altogether. SurfControl’s product cans also be customised to deny the file transfers.

“By detecting and preventing the use of programs like Skype on the internal network, companies are strengthening their overall security infrastructure with little to no impact to their already overwhelmed resources,” said Rayner.