Attacks on Internet users increasing

BANGALORE, INDIA: A recent survey of more than 5,000 active Internet users across 10 cities in India suggests that users are becoming increasingly concerned about online security.

According to the VeriSign commissioned study, ninety one percent of the respondent Internet users have experienced some case of cyber fraud, such as phishing, key logging, identity theft and account takeover. Despite the exposure to cyber fraud, a majority of respondents were unaware of ways to combat it.

Dr.Shekhar Kirani, Country Manager, VeriSign India talked about the gravity of the online threats and the cautions online users need to take in an recent interview with CIOL. Excerpts:

CIOL: How grave are online threats for today's Internet users?

Shekhar Kirani: This study clearly indicates that while users may be unaware of how to protect themselves online, their desire to be safe is high.  The key is to keep one step ahead by knowing how to protect ourselves online, embracing best practices and using the latest technologies. Awareness and knowledge are the keys to combating cyber fraud.

Cyber attacks: India is the most 'peaceful' nation

CIOL: How can a common man distinguish a fraudulent web site?

SK: Look for visual cues. Prominent misspellings and frequent grammatical errors are signs that a Web site is fraudulent. You can also look for simple visual cues that show that the site is authenticated and protected. Cues include a green address bar in high-security browsers such as Internet Explorer 7 and 8, Firefox 3.0 and higher, Opera 9.X and higher, Google Chrome, Safari 3.2, Safari 4, Flock (social networking browser) and the iPhone. Other visual cues include a padlock icon in either the lower or upper right-hand corner of the screen and https:// in the browser; both of these indicate the site is secured.

US building system to detect cyber attacks

CIOL: What are the steps that a web site owner can take to ensure confidence of Internet users?

SK: A growing number of sites are accepting a second form of user authentication that comes from physical devices such as a token, credit-card form factor, a USB drive and even your cell phone.

Each device provides users with a dynamic one-time password that must be entered into a login page in addition to their user name and password. The extra layer of security hinders potential fraudsters from accessing personal accounts that are accessed by a simple user name and password by adding a second factor of user authentication.

Compare the checkout experience to well-known sites and look for anomalies. Most well-run Web sites–such as Amazon or eBay–send order confirmation, shipping confirmation e-mails and allow you to print out confirmations of your orders. Beware of a simple form with no "visual cues" and no confirmation that you entered or ordered anything. However, if the Web site is fraudulent, victims could lose their money, whether or not it had been entered securely.

CIOL: What are the factors one should consider before doing an online financial transaction?

SK: First, Internet users should know their vendor. Read their ratings and reviews from other customers and take red flags seriously. Also make sure you have some way of contacting them–look for a phone number and mailing address. Finally, try to find out where the company is based in their "about us" section.

Hacking:India needs to step up cyber offensive

Also Internet users should pay attention to the order form. The site should not ask for more than your name, shipping address, billing address, credit card type, number and expiration. Data such as social security number, bank routing number, etc. should not be collected. For a safer online experience and for more tips and tricks to combat cyber threat, a Web site devoted to helping consumers keep safe as they surf the Web. Created by VeriSign, the  TrustTheCheck web site presents the tips and techniques consumers need to safely shop, bank, trade stocks and book travel online.