virtual techdays INDIA │ 9-11 February 2011 Safe Browsing Experience for your Home & Office M.S.Anand │ MTC Technology Specialist │ Microsoft Corporation

Agenda After attending this session you will be able to: – Understand online threat landscape – Get some tips on family safety & secure browsing at home – See some of the new security features of Internet Explorer in action 2

Primary Online Risks & Threats 3 Your computer Viruses Worms Trojans Spyware Your family Cyberbullies File sharing abuses Invasion of Privacy Disturbing Content Predators Yourself Online fraud Phishing Hoaxes Identity theft Spam

What can you do? 4 Your computer 1.Use an Internet firewall. 2.Keep your operating system up-to-date. 3.Install and maintain antivirus software. 4.Install and maintain antispyware software. Your family 1.Talk with your kids & set clear rules. 2.Keep personal information private. 3.Use individual accounts & passwords 4.Use family safety software & monitor usage. Yourself 1.Practice Internet behavior that lowers your risk. 2.Manage your personal information carefully. 3.Use anti-phishing and anti-spam technology.

Family Safety with Windows 7, Windows Live 5 Set up individual accounts Contact management Limit access to PC, Web sites, games View reports of kids’ computer use Limit access to Programs

Enhancing Online Trust & Confidence 6 Freedom from intrusion Choice and control Clear notice of information use Provide only what is needed Choice and control Clear notice of information use Provide only what is needed Control of information Browser & Web Server Exploits Protection from deceptive websites, malicious code, online fraud, identity theft Browser & Web Server Exploits Protection from deceptive websites, malicious code, online fraud, identity theft Protection from harm Social Engineering & Exploits Reduce unwanted communications Social Engineering & Exploits Reduce unwanted communications

Enhancing Online Trust & Confidence 7 Freedom from intrusion Choice and control Clear notice of information use Provide only what is needed Choice and control Clear notice of information use Provide only what is needed Control of information Browser & Web Server Exploits Protection from deceptive websites, malicious code, online fraud, identity theft Browser & Web Server Exploits Protection from deceptive websites, malicious code, online fraud, identity theft Protection from harm Social Engineering & Exploits Reduce unwanted communications Social Engineering & Exploits Reduce unwanted communications International Domain Name Anti-Spoofing Pop-up Blocker in Increased usability User-friendly, discoverable notices P3P-enabled cookie controls Delete Browsing History InPrivate™ Browsing & Blocking Secure Development Lifecycle Extended Validation (EV) SSL certs SmartScreen® Filter Domain Highlighting XSS Filter, DEP/NX ActiveX Controls Lockdown

Domain Highlighting Helps you to more accurately ascertain the domain of the site you are visiting. The domain is black, other characters are gray. 8

SmartScreen® Filter 9

XSS Filter XSS Attacks: – Steal cookies & history – Log keystrokes – Deface sites – Steal credentials (of a sort) – Port-scan the Intranet – Abuse browser/AX vulnerabilities – Evade phishing filters – Circumvent HTTPS 10

Delete Browsing History More Granular Control & Utility Can Preserve Favorite Data while deleting all other data retained by the browser 11

InPrivate InPrivate Browsing – Enables “leave no tracks” locally (cookies, cache & history) – Value when using public PCs & shopping for gifts on a shared PC. InPrivate Blocking – Helps to put users in control of their info to third-party sites. – Assess, on an ongoing basis, user exposure to third-party content. – Helps to prevent information disclosure by automatically blocking high-frequency third-party content from sites users visit. 12

New in IE 9 Improved Application Reputation – Uses reputation data to remove unnecessary warnings for well- known files, and show more severe warnings when the download is a higher risk of being malicious Improved SmartScreen Filter – Helps protect users from malware and phishing sites Malvertizing Protection – On some occasions a trustworthy site may inadvertently embed a malicious advertisement that can be used to attack you. IE9 helps protect you from risks such as these 13

Deployment challenges? The most IT friendly browser, with tools to manage and deploy – Nearly 1500 group policies – Ability to set preferences using IEAK – Integration with Windows to ensure ease of deployment 14

Some GP Examples for IE Security 15 Group PolicySetting Turn off Managing Phishing FilterAutomatic Turn off “Delete Browsing History functionality”Enable Security Zones: Do not allow users to change policiesEnable Security Zones: Do not allow users to add/delete sitesEnable \Internet Control Panel\Disable the Security pageEnable \Internet Control Panel\Prevent ignoring certificate errors Enable \Internet Control Panel\Security page\Turn on automatic detection of the intranet Enable \Internet Control Panel\Security page\ Turn on information bar notification for Intranet content Enable

Feeling Secure Already? Domain Highlighting SmartScreen Filter XSS Filter 16 Delete Browsing History InPrivate Browsing IE 9 Security

Secure, reliable, and private Leading malware protection Over 1 billion malware blocks Always improving efficiency 160 million phishing blocks SmartScreen download reputation

virtual techdays INDIA │ 9-11 February 2011 Have a safe browsing experience with: THANK YOU !