Slide # 1 Title Slide Preamble Introduce Participants and roles Have sign up sheet available for larger groups Acknowledge and review agenda for the meeting Are there any questions or additions to the agenda? Has anything changed since our last meeting? (if applicable) Does anyone have any time constraints? Our presentation will last approximately 15 minutes depending on your questions Feel free to ask any questions as we go along Presentation First of all I would like to thank all of you for attending this meeting. We realize that your time is precious and it will be our objective to make the meeting a valuable use of your time. Bridge If informal “loose” group Who can tell me what WhiteHat stands for? More serious group I would like to begin by sharing the origin of the WhiteHat name with you

Agenda Identity – Identity Theft Phishing/Pharming and variants Other Threats Theft Incidents What is the US doing that we should think about Conclusions Recommendations

This is Me!

This is also Me, well sort of!

This is Where I work

Results 1 - 10 of about 615 for Rosaleen Citron. (0.03 seconds)  Corporate Information at WhiteHat Inc Rosaleen Citron Chief Executive Officer, WhiteHat Inc. Rosaleen Citron is the Chief Executive Officer of WhiteHat Inc., an industry leading Information ... www.whitehatinc.com/corporate/profiles/ - 29k - Cached - Similar pages Media Room at WhiteHat Inc Featured WhiteHat personnel: Rosaleen Citron, CEO and Tom Slodichak, CSO. Inquiries in Remote Access Tools Explode because of SARS Scare ... www.whitehatinc.com/media/tv_and_radio/ - 35k - Cached - Similar pages [ More results from www.whitehatinc.com ] [DOC] Rosaleen Citron File Format: Microsoft Word 2000 - View as HTML Rosaleen Citron is the Chief Executive Officer of WhiteHat Inc., ... Most recently CRN Magazine, names Rosaleen Citron #2 in the 5 Canadian Innovators worth ... www.asisottawa.com/text/citron-bio.doc - Similar pages ASIS International Ottawa Chapter #140 Committee - Meeting EVENT: Rosaleen Citron and Chris Voice - Identity Theft ... Rosaleen Citron is the Chief Executive Officer of WhiteHat Inc., an industry leading Information ... www.asisottawa.com/meeting.html - 17k - Cached - Similar pages Rosaleen Citron -- 2005 e-Financial WorldExpo Rosaleen Citron Chief Executive Officer, Whitehat Inc. ... Rosaleen Citron is the Chief Executive Officer of WhiteHat Inc., an industry leading Information ... e-financial.wowgao.com/presentation_ proposals/pre_show.php?subjectid=389 - 4k - Cached - Similar pages

Phishing Statistics November 05 Highlights • Number of unique phishing reports received in November: 16882 • Number of unique phishing sites received in November: 4630 • Number of brands hijacked by phishing campaigns in November: 93 • Number of brands comprising the top 80% of phishing campaigns in November: 6 • Country hosting the most phishing websites in November: United States • Contain some form of target name in URL: 49 % • No hostname just IP address: 33 % • Percentage of sites not using port 80: 6 % • Average time online for site: 5.5 days • Longest time online for site: 30 days Phishing Targets

Three Pressure Points Home Computer Users E-Commerce Portal Operators Data Aggregators

Spyware Threat Landscape Crimeware Key stroke loggers Redirectors Man in the Middle Phishing (Pharming) Other Typo attacks Search Engine Poisoning

Phishing Tactics

Phishing Email Reports And Phishing Site Trends

More Sophisticated Trojans and Infection Methods

Code discovered in IFRAME

2005 Hall of Shame Card Systems Bank of America Choice Point DSW Shoe Warehouse Federal Deposit Insurance Corp. (FDIC) Lexis-Nexis Polo Ralph Lauren UPS University of Colorado Wachovia

Example of U.S. Programs Stop, Think, Click Cyber Security workshops Cyber Safety Multi Media events Cyber Security Awareness programs Declaring a Cyber Security Awareness month

8 Tips posted on all relevant sites Protect your personal information. It's valuable. Know who you're dealing with online. Use anti-virus software, a firewall, and anti-spyware software to help keep your computer safe and secure. Be sure to set up your operating system and Web browser software properly, and update them regularly. Use strong passwords or strong authentication technology to help protect your personal information. Back up important files. Learn what to do if something goes wrong. Protect your children online.

Web sites for Statistics. www.fraud.org www.staysafeonline.org www.antiphishing.org www.phonebusters.com www.RCMP-grc.gc.ca

Thank You ! Slide # 14 Conclusion Thank you very much for your valuable time. What questions do you have? Next steps?