I've got a bad case of ... EDI VIRUS BLUES?
The other day - on, yes, the EDI-L Yahoo Group - I read a post about how an Information Security department of a company was worried about the concepts of viruses and hackers gaining access through the EDI system and the documents we trade via EDI. Most of the replies were, as you would suspect, "is your infosec group smoking crack..?!?" or something to the same thought..
But it does beg the question - how susceptible to a virus attack, a trojan horse, a hack or some other kind of attack are we through our EDI processes? There are no virus scanners and other system tools to scan the data as it's coming into the system via our AS2 or bisync communications sessions. There's not much to stop the virus or hack or trojan from getting into the system, now is there...?
Sure, you may have a firewall set-up and the data must pass through the firewall, but you've basically given it permission to travel through that wall, anyway, simply by virtue of the fact that you've given permission to the connection that the data (virus laden or otherwise!) is traveling along.
But that's about the place when their concept of the attack falls flat...
Look at the way the ...