Understanding Security Measures in E-Commerce Systems

Week:4
Week:4
E-commerce Security
E-commerce Security
Copyright © 2014 Pearson Education, Inc. Publishing as Prentice Hall

The E-commerce Security Environment
Figure 5.1, Page 252
Copyright © 2014 Pearson Education, Inc. Publishing as Prentice Hall Slide 5-2

Table 5.3, Page 254

The Tension Between Security and
Other Values
 Ease of use
The more security measures added, the more
difficult a site is to use, and the slower it becomes
 Public safety and criminal uses of the
Internet
Use of technology by criminals to plan crimes or
threaten nation-state

Vulnerable Points in an E-commerce
Transaction

Most Common Security Threats in the
E-commerce Environment
 Malicious code (malware, exploits)
Drive-by downloads
Viruses
Worms
Ransomware
Trojan horses
Backdoors
Bots, botnets

Most Common Security Threats (cont.)
 Potentially unwanted programs (PUPs)
Browser parasites
Adware
Spyware
 Phishing
Social engineering
E-mail scams
Spear-phishing
Identity fraud/theft

 Hacking
Hackers vs. crackers
Types of hackers: White, black
Hacktivism
 Cybervandalism:
Disrupting, defacing, destroying Web site
 Data breach
Losing control over corporate information to outsiders

 Spoofing and pharming
 Spam (junk) Web sites (link farms)
 Denial of service (DoS) attack
 Hackers flood site with useless traffic to overwhelm
network
 Distributed denial of service (DDoS) attack

 Sniffing
 Eavesdropping program that monitors information
traveling over a network
 Insider attacks
 Poorly designed server and client software
 Social network security issues

Insight on Technology: Class Discussion
Think Your Smartphone Is Secure?
 What types of threats do smartphones face?
 Are there any particular vulnerabilities to this
type of device?
 Are apps more or less likely to be subject to
threats than traditional PC software
programs?

Technology Solutions
 Protecting Internet communications
Encryption
 Securing channels of communication
SSL, VPNs
 Protecting networks
Firewalls
 Protecting servers and clients

Tools Available to Achieve Site Security

Encryption
 Encryption
 Transforms data into cipher text readable only by sender
and receiver
 Secures stored information and information transmission
 Provides 4 of 6 key dimensions of e-commerce security:
 Message integrity
 Nonrepudiation
 Authentication
 Confidentiality

Securing Channels of Communication
 Secure Sockets Layer (SSL)
Establishes secure, negotiated client–server
session
 Virtual Private Network (VPN)
Allows remote users to securely access internal
network via the Internet
 Wireless (Wi-Fi) networks
WPA2

Protecting Networks
 Firewall
 Hardware or software
 Uses security policy to filter packets
 Two main methods:
 Packet filters
 Application gateways
 Proxy servers (proxies)
 Software servers that handle all communications from or
sent to the Internet

Firewalls and Proxy Servers

Protecting Servers and Clients
 Operating system security
enhancements
Upgrades, patches
 Anti-virus software
Easiest and least expensive way to prevent threats
to system integrity
Requires daily updates

Understanding Security Measures in E-Commerce Systems

More Related Content

Similar to Understanding Security Measures in E-Commerce Systems (20)

Recently uploaded (20)

Understanding Security Measures in E-Commerce Systems