Online Safety

• Analyzing threats, sharing knowledge
• Protecting our children
• Working with governments to stop cybercrime
• Safeguarding the future

Online threats today are more sophisticated, damaging, and potentially dangerous than ever before. And though our software is a powerful deterrent to viruses, fraud, malicious code, Trojan horses, spam, and other disruptive attacks, consumers and businesses must be aware and vigilant in protecting themselves online. We see it as part of our core responsibility to educate consumers, businesses, families, schools, and communities about how they can recognize and take action against cyberattacks and cybercrime. In addition to maintaining up-to-date resources on the Symantec Web site, we partner with nonprofit organizations to reach special populations, and we encourage our employees to share their online safety expertise both internally and externally.

We have gathered these diverse efforts under our Family Online Safety Initiative. An internal workgroup, composed of employees from public affairs, public relations, marketing, philanthropy, and other divisions, provides direction and oversight. Symantec’s Group President of the Consumer Business Unit serves as the group’s executive sponsor.

Analyzing threats, sharing knowledge

Global Intelligence Network

Symantec has established some of the most comprehensive sources of Internet threat data in the world through the Symantec™ Global Intelligence Network. This network captures worldwide security intelligence information that gives Symantec analysts unparalleled sources of data to identify and analyze, in order to deliver protection and to provide informed commentary on emerging trends in attacks, malicious code activity, phishing, and spam. The network includes, but is not limited to, over 240,000 sensors that monitor Internet activity in more than 200 countries. Symantec gathers malicious code data along with spyware and adware reports from more than 130 million client, server, and gateway systems that have deployed Symantec’s antivirus products. Over eight billion email messages and over one billion web pages are processed daily. Eleven Security Research Centers constantly research the latest trends and track the latest threats while three Security Operations Centers provide managed security services. The Symantec Global Intelligence Network is backed by human intelligence. Top security researchers provide actionable information, context, and analysis of data gathered through the network to Symantec’s customers.

Internet Security Threat Report

Symantec has published the 14th edition of the Internet Security Threat Report (ISTR). The ISTR provides a concise analysis of threat activity and includes documentation of vulnerabilities, malicious code, phishing, spam, security risks, and future trends. We regularly research and compile this report and make it freely available on our website so that global awareness of Internet security trends can continue to grow.

Preventing online fraud

Perhaps the most worrisome threat to many consumers is that of online fraud; the Federal Trade Commission (FTC) estimates that 1 in 25 Americans is a victim. In response, Symantec has created an online cybercrime Web site that includes tips and resources for avoiding and responding to online fraud. We provide easy-to-follow explanations of common cyberthreats, such as spyware, "Trojan horses", and "bots", so that consumers know what to look for when confronted with unfamiliar email messages, files, or programs.

Symantec also conducts a variety of educational programs around Internet risks. We joined forces with the FTC to inform consumers about online fraud by providing information on how to spot phishing emails and prevent the theft of personal, confidential information.

Leverage Innovative Reputation-based Security Technology

Symantec is working to incorporate the latest, cutting-edge security in our new products. Norton Internet Security™ 2010 and Norton AntiVirus™ 2010 products use application reputation approaches to respond to the problem of dealing with online criminals who use new and unique threats to evade security vendors.  Application reputation is created by leveraging the millions of users in the worldwide Norton Community Watch program who choose to anonymously contribute data about the characteristics of the applications running on their systems. Most users run mostly good applications, of known origins and with known publishers and other common attributes. Conversely, malware typically has never been seen before, has an unknown publisher, and may display other attributes that give it a poor reputation. This data enables Symantec to calculate a reputation safety score for each application and statistically infer with an extremely high degree of accuracy the likelihood of an unknown application being good or bad.

Reaching out through our employees

The Symantec Employee Evangelism Program encourages employees to take individual action to educate their families, other parents, and local schools and communities about online safety. Employees are provided with tools, training, and information to help them answer questions about online security and are encouraged to set up meetings to share their knowledge.

Working with governments to stop cybercrime

Symantec works closely with U.S. policymakers to raise awareness of the importance of computer safety. For example, Symantec worked with legislatures in more than 30 states to designate October as National Cyber Security Awareness Month. In June 2009, we hosted approximately 1,000 attendees at the 2009 Symantec’s Government Symposium in Washington, D.C. These and other efforts result in heightened awareness among consumers and policymakers of the importance of cybersecurity and the steps that users must take to protect themselves.

As part of the launch of our new OnlineFamily.Norton safety product, Symantec is engaging governments globally to demo the capabilities of the service. Symantec’s government affairs team is also working to ensure that any policy or legislative approach to family or child online safety is a rational and reasonable one.

Symantec coordinates with national and international governments and law-enforcement agencies to ensure that they have the training and resources needed to aggressively pursue and capture cybercriminals. In the United States, Symantec brings together law-enforcement agencies to develop strategies for coordinating and improving governmental responses to cyberthreats.

Safeguarding the future

Symantec is committed to fostering the next generation of experts in cybersecurity. We partner with a number of leading educational institutions, including Purdue University, Carnegie Mellon University, and the University of California system, to provide financial support to students in cybersecurity through scholarships, fellowships, and sponsorships.

The Symantec Research Labs Graduate Fellowship program is currently in its third year and has played a strong role in our efforts to continuously generate innovative solutions to today’s challenges. The Symantec Research Labs team announced in February 2009 that three recipients were chosen to receive full one-year fellowships covering 100 percent of tuition and fees, along with a competitive stipend to fund ongoing research in their respective areas of expertise. Past recipients of the graduate fellowship program have made substantial contributions to Symantec’s market-leading products, prestigious industry groups, and the academic community.

We also provide internships for students in cybersecurity and specifically target at least 30 percent of our intern hires to be minorities and/or women. These students work onsite at Symantec's research labs, learning valuable skills that they can then use in both their academic training and future careers. Many Symantec interns eventually join our company as full-time employees.