英语论文网

In a typical e-Commerce experience, a shopper proceeds to a Web site to browse a catalogue and make a purchase. This simple activity illustrates the four major players in e-Commerce security. One player is the shopper who uses his browser to locate the site. The site is usually operated by a merchant, also a player, whose business is to sell merchandise to make a profit. As the merchant business is selling goods and services, not building software, he usually purchases most of the software to run his site from third-party software vendors. The software vendor is the last of the three legitimate players. The attacker is the player whose goal is to exploit the other three players for illegitimate gains. Khusial and McKegney (2005)

Organized crime is spending significant resources to compromise the e-commerce environment to obtain personal information for identify or payment thief.

Organize crime (Attackers) use social engineering to trick the shopper into giving out their personal information. Attackers also use snooping to scan shoppers' computer with the uses of viruses, Trojans, or bugs. Another method attacker's use is sniffing the networks between the shoppers' computer and the merchant server, and attackers will use known server root vulnerabilities or bugs to exploit the e-commerce business. However despite the existence of attackers and organized crime, e-Commerce remains a safe and secure activity.

With that said, e-commerce security is quite complex requiring a variety of disciplines to implement a fully secure the infrastructure. Zanten will engage external service providers with the necessary expertise to provide the required security.

Zanten must invest time and money in;

Thoroughly evaluate service providers

Conduct risk assessments of the service providers

Ensuring systems are harden against attacker

Actively manage software developments

Ensure penetration testing has been conducted

Monitor for new threats and vulnerabilities

Implement fraud detection measures

Establish an incident response program

It is imperative that Zanten does not expose a consumer's personal data as too much is at stake for Zanten's reputation and creditability are key factors for a successful business. Securing our e-commerce business will broken down into four categories to protect from attackers and organized crime;

Authentication: Verifies the shopper

Authorization: Having the necessary protection around personal data and account management

Encryption: protecting information

Auditing: Keeps a record of operations as prove of consumer activity

Education is the best way to secure the safety of the consumer information. Cstomers must take appropriate precautions to install personal firewalls for the client machines and protect their username and password securely. The merchant (Zanten) must store confiden本论文由英语论文网提供整理，提供论文代写，英语论文代写，代写论文，代写英语论文，代写留学生论文，代写英文论文，留学生论文代写相关核心关键词搜索。