1. Security Insights: Identity Theft & Management

2. The Identity Theft Problem What is Identity Theft? Dumpster diving Low tech Phishing/Pharming Targets individual users (albeit in mass) Theft of PII data from companies Accounts for 70% of Identity Theft 60% of Identity Thieves do not work alone We are engaging in business practices which make things worse Outsourcing millions of jobs to other countries Increasingly mobile more business conducted electronically

3. What can you do? If you are a consumer Evaluate IE7, XP SP2, Defender, MSN Anti- Phishing Filter If you are a organization Get your Identity and Access Management House in order More on that shortly…

4. The Unifying Identity Metasystem At the RSA Conference 2006 Bill Gates outlined Microsoft’s vision for the Unifying Identity Metasystem Built upon industry agreed Rules of Identity Allows for user centric control of identity information Standards based on WS-* protocols Allows for federated use of Identities from various sources: Personal, Credit Card, Citizen, Professional Industry co-operation is making this happen

5. Infrastructure for Identity & Access Windows Server Identity and Access Services Unified Architecture, Policy Model, and Management StrongCredentialsFederatedIdentityDirectoryService ProcessAutomation Auditing AccessControlInformationProtection Identity and Access Capabilities SingleSign-on Federation Services Domain and Directory Services Certificate Services Rights Mgmt Services Metadirectory Services SecurityTokenService*

6. Microsoft Identity Integration Services Strategy Get to critical mass of provisioning features Fully integrated workflow and audit Make MIIS the engine of identity and access management and compliance Workflow, audit to model compliance controls Build on Metadirectory technical strength in convergence and enforcement Integrate these capabilities with our broader connected systems platform SunOne SQL Oracle Notes MIIS

7. New User User ID Creation Credential Issuance Entitlements Change User Promotions Transfers Entitlement Changes Help Desk “Lost” Credentials Password Reset New Entitlements Retire User Delete Accounts Remove Entitlements Reporting Compliance Audit Security Identity Lifecycle Self-Service Password Kiosk New Entitlements

8. Active Directory Domain Services Directory Services Rights Management Services Certificate Services Metadirectory Services Federation Services Connected Integrated Refined Unified

9. Get Your Identity and Access Management House in Order Talk to us on the stand Vista IE7, Defender, Anti-Phishing demos Read the Microsoft Identity and Access Management Series http://www.microsoft.com/technet/security Download MIIS 2003 Eval.: www.microsoft.com/miis

10. More Security Insights – Coming Up 11:15Secure Messaging 11:45Identity Theft 12:15How Microsoft Secures IT 12:45User Security 13:15Secure Messaging 13:45Spyware 14:15Identity Theft 14:45How Microsoft Secures IT 15:15User Security 15:45Spyware

11. © 2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. www.microsoft.com/uk/security www.microsoft.com/uk/technet

12. Identity & Access Platform Connectors Integration with non-Windows integrated applications and systems Identity and Access Platform User Experience Logon & credentials Self-service Developer Experience Directory APIs Access APIs Integration APIs IT Pro Experience Management Delegated admin Integration Services Process automation Process control Directory Services Distributedpublication Access Services AuthenticationAuthorizationAudit Credential Management

13. What is Identity? A set of claims that characterize a person or thing in the digital world. A Claim is a statement made about someone/something by someone/something. Claims are packaged in Security Tokens.