Identity Theft and Safe Computing Keeping yourself You by good habits and good technology

The Threats Malware Malware Adware Adware Spyware Spyware Worms Worms Viruses Viruses Trojan Horses Trojan Horses Bots/Zombies Bots/Zombies

The Threats Phishing and Pharming Phishing and Pharming

Safe Computing Safe Surfing (safe web, , IM) Safe Surfing (safe web, , IM) Safe Passwords Safe Passwords Safe Systems (making your computer help you) Safe Systems (making your computer help you)

Safe Surfing Windows popup or web popup? Windows popup or web popup? Careful where you click Careful where you click URL Spoofing URL Spoofing Vulnerabilities (IE/Firefox spoofs) Vulnerabilities (IE/Firefox spoofs) Others Others

Safe Surfing URL Spoofing examples: URL Spoofing examples: Mouseovers Mouseovers HEX Encoding HEX Encoding Decimal IP address Decimal IP address and web and web

Safe Surfing Under Lock and Key Under Lock and Key SSL SSL Terminology Terminology Certificate Certificate Certificate Authority Certificate Authority How to Check it How to Check it

(Shows live phishing sites)

Safe Surfing Safe Safe Unexpected attachments Unexpected attachments Guilty until proven innocent Guilty until proven innocent No real security No real security From/Reply-to arbitrary From/Reply-to arbitrary Encryption / Authentication Encryption / Authentication

Safe Surfing Spoofing Spoofing Embedded forms Embedded forms URL spoofing in URL spoofing in ‘Account Updates’ ‘Account Updates’ ‘Security Notices’ ‘Security Notices’

Safe Surfing Safe IM Safe IM Similar to Similar to Same defenses Same defenses

Safe Surfing Summary Summary is untrustworthy is untrustworthy Watch the URLs Watch the URLs Common sense Common sense

Safe Passwords New Campus Policies New Campus Policies Why do we have this policy? Why do we have this policy? Single point of failure Single point of failure Tradeoffs Tradeoffs

Safe Passwords Making good passwords Making good passwords Phrases Phrases Lyrics, poems, quotes Lyrics, poems, quotes Obfuscate Obfuscate Storing your password Storing your password Protect like a credit card Protect like a credit card Password vault Password vault Multi-factor protection Multi-factor protection

Safe Systems Check with your local support staff Check with your local support staff Anti-virus Anti-virus McAfee is FREE! McAfee is FREE! Necessary, but not enough to be safe Necessary, but not enough to be safe

Safe Systems Anti-spyware Anti-spyware Ad-aware Ad-aware Spybot Search and Destroy Spybot Search and Destroy Still not enough! Still not enough!

Safe Systems Automatic Updates Automatic Updates Most important, and very nearly enough Most important, and very nearly enough

Safe Systems Alternate Browsers Alternate Browsers IE vulnerabilities IE vulnerabilities Opera Opera Firefox (mozilla) Firefox (mozilla)

Summary Secure your machine Secure your machine Choose good passwords and protect them Choose good passwords and protect them Be careful how you surf Be careful how you surf At Home / At Work At Home / At Work

Questions? Jordan Wiens Security Team