1. Web Security Tips Li-Chiou Chen & Mary Long Pace University September 1 st, 2010

2. Acknowledgement The authors acknowledge the support of the Verizon Foundation in partnership with Pace University through its Thinkfinity Initiative. 2 © Li-Chiou Chen & Mary Long, Pace University

3. What do you do online? Browsing sites Blogging Social networking Email Online shopping Online banking Managing photos Managing calendars ……. 3 © Li-Chiou Chen & Mary Long, Pace University

4. Common Threats Intrusion  Accessing a computer without permission Malware  Programs that are designed to harm your computer Spyware  Software that sends information from your computer to a third party without your consent 4 © Li-Chiou Chen & Mary Long, Pace University

5. Common Threats (2) Site Hijacking  Misrepresenting a web site by stealing and manipulating its content Phishing  Using fake Web sites to trick you into giving away personal information © Li-Chiou Chen & Mary Long, Pace University 5

6. DoD video on Phishing http://iase.disa.mil/eta/phishing/Phishing/launchP age.htm http://iase.disa.mil/eta/phishing/Phishing/launchP age.htm © Li-Chiou Chen & Mary Long, Pace University 6

7. How to determine if a web site is legitimate Make sure that the web address is correct  Google it or type it yourself  Do not click on links in emails Use HTTPS encryption for sensitive information Verify the site using the security padlock Use browser security features  Firefox has more default security settings than IE Pay attention to browser warnings © Li-Chiou Chen & Mary Long, Pace University 7

8. Look at web address to determine if it is a legitimate site 8 “https” refers to the content is encrypted www.citicards.comwww.citicards.com is the domain name (or site name) © Li-Chiou Chen & Mary Long, Pace University

9. Examples of fake web addresses http://www.citicards.com.chilli.net http://129.20.1.2/www.citicards.com/ http://paybill.center.net/citicards/ © Li-Chiou Chen & Mary Long, Pace University 9

10. Examine the security padlock to verify the site 10 Alternative ways of showing the security Padlock © Li-Chiou Chen & Mary Long, Pace University

11. You need to double click the padlock to verify it 11 This verifies that www.citicards.com is owned by Citigroup Inc. VeriSign, Inc. verifies this information This indicates that the content is encrypted © Li-Chiou Chen & Mary Long, Pace University

12. User login only authenticate users It cannot tell users if the site is legitimate or not © Li-Chiou Chen & Mary Long, Pace University 12

13. References My Secure Cyber Space  https://www.mysecurecyberspace.com/ 13 © Li-Chiou Chen & Mary Long, Pace University