11
Phishing & Pharming Methods and Safeguards Baber Aslam and Lei Wu

Phishing & Pharming Methods and Safeguards Baber Aslam and Lei Wu

Embed Size (px)

DESCRIPTION

Phishing & Pharming Methods and Safeguards Baber Aslam and Lei Wu. Outline. Threats to Identity Theft Phishing Definition Methods Pharming Definition Methods Safeguards Project aims. Identify Theft. Two major Identity theft threats Aim at stealing personal sensitive data - PowerPoint PPT Presentation

Citation preview

Page 1: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Phishing & Pharming Methods and Safeguards

Baber Aslam and Lei Wu

Page 2: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 2

Outline

Threats to Identity Theft Phishing

– Definition

– Methods Pharming

– Definition

– Methods Safeguards Project aims

Page 3: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 3

Identify Theft

Two major Identity theft threats Aim at stealing personal sensitive data

– ID & password

–Passport information

–SSN

–Bank account numbers

–Credit card numbers

–etc

Page 4: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 4

Statistical Highlights for 2nd Half, 2008

Phishing Activity Trends Report, 2nd Half 2008

Page 5: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 5

Statistical Highlights for 2nd Half, 2008

Phishing Activity Trends Report, 2nd Half 2008

Page 6: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 6

Phishing

Page 7: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 7

Methods / Techniques

Misspelled URLs – (http://www.eccs.ucf.edu/account)

Spoofing URLs (http://[email protected])

Javascript International Domain Names

Page 8: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 8

Pharming

Page 9: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 9

Methods / Techniques

Email Viruses–Alters the computer’s host file

DNS Poisoning–Nothing on computer changes

–The company’s website is “hijacked” Web Cache Poisoning Drive-by pharming

Page 10: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 10

Safeguards

Specialized “Anti-Phishing” Software Spam filters Multifactor authentication Challenge Questions Secure connections DNS protection

Page 11: Phishing & Pharming  Methods and Safeguards Baber Aslam and Lei Wu

Page 11

The project aims at studying the methods of Phishing and Pharming, and analyzing the effectiveness of the safeguards against these methods.

Proposal