1. Identity Theft and Safe Computing Keeping yourself You by good habits and good technology

2. The Threats Malware Malware Adware Adware Spyware Spyware Worms Worms Viruses Viruses Trojan Horses Trojan Horses Bots/Zombies Bots/Zombies

3. The Threats Phishing and Pharming Phishing and Pharming

4. Safe Computing Safe Surfing (safe web, email, IM) Safe Surfing (safe web, email, IM) Safe Passwords Safe Passwords Safe Systems (making your computer help you) Safe Systems (making your computer help you)

5. Safe Surfing Windows popup or web popup? Windows popup or web popup? Careful where you click Careful where you click URL Spoofing URL Spoofing Vulnerabilities (IE/Firefox spoofs) Vulnerabilities (IE/Firefox spoofs) Others Others

6. Safe Surfing URL Spoofing examples: URL Spoofing examples: http://www.ebay.com-SECURITYCHECKw8grHGA889yK@evilhackersRus.com http://www.ebay.com-SECURITYCHECKw8grHGA889yK@evilhackersRus.com Mouseovers Mouseovers HEX Encoding HEX Encoding Decimal IP address Decimal IP address Email and web Email and web

7. Safe Surfing Under Lock and Key Under Lock and Key SSL SSL Terminology Terminology Certificate Certificate Certificate Authority Certificate Authority How to Check it How to Check it

9. (Shows live phishing sites)

10. Safe Surfing Safe Email Safe Email Unexpected attachments Unexpected attachments Guilty until proven innocent Guilty until proven innocent No real security No real security From/Reply-to arbitrary From/Reply-to arbitrary Encryption / Authentication Encryption / Authentication

11. Safe Surfing Email Spoofing Email Spoofing Embedded forms Embedded forms URL spoofing in email URL spoofing in email ‘Account Updates’ ‘Account Updates’ ‘Security Notices’ ‘Security Notices’

14. Safe Surfing Safe IM Safe IM Similar to email Similar to email Same defenses Same defenses

15. Safe Surfing Summary Summary Email is untrustworthy Email is untrustworthy Watch the URLs Watch the URLs Common sense Common sense

16. Safe Passwords New Campus Policies New Campus Policies http://www.it.ufl.edu/policies/passwords.html http://www.it.ufl.edu/policies/passwords.html Why do we have this policy? Why do we have this policy? Single point of failure Single point of failure Tradeoffs Tradeoffs

18. Safe Passwords Making good passwords Making good passwords Phrases Phrases Lyrics, poems, quotes Lyrics, poems, quotes Obfuscate Obfuscate Storing your password Storing your password Protect like a credit card Protect like a credit card Password vault Password vault Multi-factor protection Multi-factor protection

19. Safe Systems Check with your local support staff Check with your local support staff Anti-virus Anti-virus McAfee is FREE! McAfee is FREE! http://www.software.ufl.edu/mcafee http://www.software.ufl.edu/mcafee Necessary, but not enough to be safe Necessary, but not enough to be safe

20. Safe Systems Anti-spyware Anti-spyware Ad-aware Ad-aware http://www.lavasoftusa.com/software/adaware/ http://www.lavasoftusa.com/software/adaware/ Spybot Search and Destroy Spybot Search and Destroy http://www.safer-networking.org/en/index.html http://www.safer-networking.org/en/index.html Still not enough! Still not enough!

21. Safe Systems Automatic Updates Automatic Updates http://windowsupdate.microsoft.com/ http://windowsupdate.microsoft.com/ http://net-services.ufl.edu/security/public/patches.shtml http://net-services.ufl.edu/security/public/patches.shtml Most important, and very nearly enough Most important, and very nearly enough

22. Safe Systems Alternate Browsers Alternate Browsers IE vulnerabilities IE vulnerabilities Opera Opera http://www.opera.com/ http://www.opera.com/ Firefox (mozilla) Firefox (mozilla) http://www.mozilla.org/products/firefox/ http://www.mozilla.org/products/firefox/

23. Summary Secure your machine Secure your machine Choose good passwords and protect them Choose good passwords and protect them Be careful how you surf Be careful how you surf At Home / At Work At Home / At Work

24. Questions? Jordan Wiens Security Team http://infosec.ufl.edu/352-392-2061ufirt@ufl.edu