Microsoft's Approach to Anti-Phishing
Described as the cybercrime of choice, phishing has become the fastest growing threat on the Internet. seeking to deceive recipients into divulging personal and corporate data. As with all online safety and security threats, Microsoft has employed a multi-pronged strategy of developing innovative technology, industry and business collaboration, and provding users and business with prescriptive guidance and tools.
Technology
| • | Microsoft is focusing its anti-phishing technologies on two areas: helping to prevent phishing e-mail messages from reaching customers in the first place, and helping to prevent users from accidentally providing key personal data to a fraudulent Web site. |
| • | MSN and Windows Live Hotmail users already have protection from phishing e-mail messages through Microsoft's patented SmartScreen spam filtering. |
| • | SmartScreen is also enhancing spam and junk-mail filtering in the latest versions of Microsoft Office Outlook, Exchange Hosted Filtering, Microsoft Exchange Server. |
| • | Microsoft is helping to protect the browsing experience with the new Microsoft Phishing Filter, built-in into the browser experience for consumers in new Windows Internet Explorer 7 for Windows XP and all versions of the Windows Vista operating system. It is also available in Windows Live OneCare and as part of the free to download Windows Live toolbar as part of Windows Live OneCare Advisor. This technology has been found to be one of the leading solutions for helping to protect consumer against Phishing attacks. This advanced phish-fighting capability is designed to give consumers greater clarity about known and suspected phishing attacks, and it will provide Web-site owners with a mechanism to offer more consistent and transparent content for legitimate e-commerce. |
| • | Visit http://www.microsoft.com/athome/security/online/phishing_filter.mspx to learn about how Phishing Filter works and how you can get it free for Windows XPSP2 machines and above. |
Industry and Government Collaboration
As an industry leader, Microsoft is actively involved with dozens of industry, business and law enforcement agencies worldwide fighting phishing exploits and all forms of online abuse. Collectively working with these organizations, best practices are created, interoperable technologies are developed and information is shared.
http://www.microsoft.com/mscorp/safety/industry/default.mspx
Customer Awareness and Education
The number of online risks continues to grow everyday. By raising awareness of phishing and similar issues, Microsoft and others can help reduce the number of successful phishing attacks. Microsoft provides an array of resources, tools, materials, and other information to consumers, businesses, and technology professionals. These include the Microsoft Small Business Center, Microsoft TechNet Security, and Microsoft Security Developer Center.
Other resources:
| • | Microsoft Security at Home, a comprehensive safety- and security-focused Web site for the home-PC user. |
| • | Microsoft Safety, a series of Web pages that detail Microsoft's multifaceted approach to safety technologies in general and phishing in particular for various audiences. |
| • | MSN Online Safety and Security, a collection of safety tips, information, and interactive tools designed to help consumers learn about phishing in a fun way. |