Phishing scams are a kind of semantic attack on computer systems that target the users of computer systems, rather than the system itself. Phishing is estimated to have cost over $3 billion in losses in 2008, with criminals impersonating banks, e-commerce sites, retail sites, and universities to trick people into giving them passwords or credit card information. Phishing attacks have also been used to steal sensitive information from corporations and governments, including the US Department of Defense. This talk will present ongoing research in protecting people from phishing attacks. From the Series:CSE Colloquia - 2009