23-06-2014, 12:51 PM
Different Security issues in E-Commerce
Different Security.pptx (Size: 1.01 MB / Downloads: 11)
Computer Security Classification
Secrecy/Confidentiality
Protecting against unauthorized data disclosure
Technical issues
Privacy
The ability to ensure the use of information about oneself
Legal Issues
Integrity
Preventing unauthorized data modification by an unauthorized party
Necessity
Preventing data delays or denials (removal)
Nonrepudiation
Ensure that e-commerce participants do not deny (i.e., repudiate) their online actions
Authenticity
The ability to identify the identity of a person or entity with whom you are dealing on the Internet
Viruses, Worms, and Antivirus Software
Virus
Software that attaches itself to another program
Can cause damage when the host program is activated
Macro virus
Type of virus coded as a small program (macro) and is embedded in a file
Antivirus software
Detects viruses and worms
Digital Certificates
A digital certificate is a program embedded in a Web page that verifies that the sender or Web site is who or what it claims to be
A certificate is signed code or messages that provide proof that the holder is the person identified by the certificate
Certification authority (CA) issues digital certificates
Main elements:
Certificate owner’s identifying information
Certificate owner’s public key
Dates between which the certificate is valid
Serial number of the certificate
Name of the certificate issuer
Digital signature of the certificate issuer
Organizations that Promote Computer Security
Responds to thousands of security incidents each year
Helps Internet users and companies become more knowledgeable about security risks
Posts alerts to inform the Internet community about security events
www.cert.org
SANS Institute
A cooperative research and educational organization
SANS Internet Storm Center
Web site that provides current information on the location and intensity of computer attacks
Microsoft Security Research Group
Privately sponsored site that offers free information about computer security issues