Records Consulting, LLC
Phone: 616.583.0090
FAX: 888.205.2085
Email: [EMAIL PROTECTED]
Begin forwarded message:
> From: Dave Records <[EMAIL PROTECTED]>
> Date: July 14, 2008 3:55:04 PM EDT
> To: [EMAIL PROTECTED]
> Subject: Re: [EDI-L] Has anyone seen a virus in an EDI file?
>
> I've never heard of such a thing, and wouldn't the file have to be
> executed? The translator would throw it out immediately as it
> would fail the valid EDI file test. For the most part, we use
> secure ftp or VPN's to transmit and receive files so viruses are not
> an issue unless you don't trust your trading partner! I do not
> believe a virus could be introduced into an encrypted document or
> tunnel. My 2cents worth working in automotive and transportation/
> warehousing. For a while the powers that be wanted us to use PGP
> over ANX, the automotive network, but that is certainly redundant
> encryption and they finally recognized that and backed off.
>
> Dave Records
>
>
>
>
> On Jul 14, 2008, at 3:49 PM, Richard wrote:
>
>> Hi all,
>>
>> We're fighting quite a battle here at my company with the InfoSec
>> (information security) folks and I could use some input from the
>> group.
>>
>> The core issue is if an EDI file (X.12 format EDI document) could
>> contain
>> a computer virus, trojan horse, worm, etc.?
>>
>> I say that no they can't but our InfoSec folks say "they could".
>> Hence,
>> they're talking about requiring PGP encryption/decryption, SFTP/SSH
>> transmittals, full anti-virus scan before use, etc.
>>
>> I could see the encrypted transmittal session(s) for security sake,
>> but
>> must I also pass a decrypted EDI file through an anti-virus software
>> checker before I can pass it on to my translator and/or before I
>> send it
>> out?
>>
>> I'm curious what you've seen and/or what you're doing, especially if
>> you've actually had a computer virus try to piggyback onto an EDI
>> file.
>>
>> Any comments are much appreciated.
>>
>> Richard Jones
>>
>>
>>
>
[Non-text portions of this message have been removed]
------------------------------------
...
Please use the following Message Identifiers as your subject prefix: <SALES>,
<JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>, <OFF-TOPIC>
Job postings are welcome, but for job postings or requests for work: <JOBS> IS
REQUIRED in the subject line as a prefix.Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/EDI-L/
<*> Your email settings:
Individual Email | Traditional
<*> To change settings online go to:
http://groups.yahoo.com/group/EDI-L/join
(Yahoo! ID required)
<*> To change settings via email:
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
<*> To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
