2H07
Edited by Foxit Reader Copyright(C) by Foxit Software Company,2005-2007 For Evaluation Only.
Focus on Internet Safety Enforcement Tim Cranton, Associate General Counsel
“What happened in this case is a textbook example of the cooperation necessary in this new era of globalization to be successful in addressing computer intrusions and other computer-supported criminal operations. In Microsoft, we have an excellent partner and today we acknowledge them in this small way.” – FBI Cyber Division Assistant Director James E. Finch, announcing the recognition of nine Microsoft employees for “Exceptional Service in the Public Interest” related to the ZOTOB investigation (September 25, 2006)
M
icrosoft recognizes that our leadership requires a comprehensive, global approach to Internet safety enforcement. Accordingly, this “Focus on Internet Safety Enforcement” section is designed to provide an overview of our enforcement initiatives, as a complement to the data and analysis provided by our Security Response Center in the remainder of this report. The Internet Safety Enforcement Team, a division of Microsoft Legal and Corporate Affairs group, develops and implements innovative programs to combat Internet threats, such as malicious code, botnets, phishing, spyware, spam, and online child exploitation. We assist law enforcement by developing effective technology tools and by providing training and technical support for Microsoft products and services, specifically, and, more generally, on how to investigate computer-facilitated crimes. In addition to our collaboration with law enforcement, we also work on our own and through partnerships with governmental and non-governmental agencies, and with other industry leaders, to develop technology tools, implement strong laws, enforce existing laws against bad actors, and raise awareness about cybercrime threats. We believe these five fundamental pillars—technology, legislation, enforcement, education, and partnerships—are critical to promoting a safer online environment. We focus here on a few examples of Microsoft Internet security enforcement efforts in the areas of spam, phishing, and botnets that build on these five fundamental pillars. Fighting Phishing
According to the Anti-Phishing Working Group—a cross-industry association of which Microsoft is a founding member—between 75 million and 150 million phishing e-mails are sent out every day. A Gartner survey estimates that approximately 109 million people in the United States have received a phishing e-mail, with an estimated 3.6 million adults
84