E-Commerce Security

Online Security Issues

(Common internet security issues)
• HACKERS
• VIRUSES
• SPYWARE
• WORMS
• PHISHING
• SPAMMING
• IDENTITY THEFT
 Security for Client Computers
(Types & its important)
• Physical Security
-Lock their workstations when they walk away
-Send out an email in the user’s name
-Surf a website that downloads a virus software
unknown
-The first line of defense for client computers
-A laptop should never be left on a car seat or
hotel room.
• Authentication
-Require a user to log in before using it.
-Stops everyone who is not an authorized user on the
computer or the network from using a client machine for
mischievous purposes.

• Anti-malware Software
-The abundance of malware in the form of viruses,
worms, Trojan horses
-If one machine becomes infected, all machines on the
network will become infected.
-Viruses and worms spread extremely fast, and it only
takes a few minutes to infect every machine on the
network
-Large companies : buy anti-malware product
-Smaller companies: free download
• Firewall
-Personal firewall installed on the machine.
-Windows and most Linux distributions have a
client firewall included
-Windows’ firewall is preconfigured for default
protection.
 Communication Channel Security
Used Technologies
The following technologies are used for
communication:
• HTTP/HTTPS
• WebDAV
• ICE
• JDBC on OpenSQL
• Operation-system-dependent and database-
specific technologies
 Security for Server Computers
(Security measure to protect server)
SSH Keys
• SSH keys are a pair of cryptographic keys that
can be used to authenticate to an SSH server
as an alternative to password-based logins. A
private and public key pair are created prior to
authentication. The private key is kept secret
and secure by the user, while the public key
can be shared with anyone.
 Security for Server Computers
(Security measure to protect server)
Firewalls
• A firewall is a piece of software (or hardware)
that controls what services are exposed to the
network. This means blocking or restricting
access to every port except for those that
should be publicly available.
 Security for Server Computers
(Security measure to protect server)
VPNs and Private Networking
• Private networks are networks that are only available
to certain servers or users. For instance, in
DigitalOcean, private networking is available in some
regions as a data-center wide network.
• A VPN, or virtual private network, is a way to create
secure connections between remote computers and
present the connection as if it were a local private
network. This provides a way to configure your services
as if they were on a private network and connect
remote servers over secure connections.
 Security for Server Computers
(Security measure to protect server)