Slide 1 Phishing s CS 142 Lecture Notes: Security Attacks: Phishing

Slide 2 Legitimate: Extended Validation

CS 142 Lecture Notes: Security Attacks: PhishingSlide 3 Obviously Illegitimate

CS 142 Lecture Notes: Security Attacks: PhishingSlide 4 Look-alike Characters

CS 142 Lecture Notes: Security Attacks: PhishingSlide 5 Legitimate Partners Can Look Fishy ???

CS 142 Lecture Notes: Security Attacks: PhishingSlide 6 International Character Sets ● What does this URL refer to? ● This is a host name only! Chinese characters that look like "/", "?", and "="

CS 142 Lecture Notes: Security Attacks: PhishingSlide 7 Picture in picture

CS 142 Lecture Notes: Security Attacks: PhishingSlide 8 HTTPS Indicators HTTPHTTPS Firefox 10 IE 8 Chrome 17

CS 142 Lecture Notes: Security Attacks: PhishingSlide 9 Extended Validation Certificates ExtendedNormal HTTPS Firefox 10 IE 8 Chrome 17 Certificate Authority

CS 142 Lecture Notes: Security Attacks: PhishingSlide 10