E-commerce- Security & Encryption
- 2. Dimensions of E-commerce Security Integrity. Non denial. Authenticity. Confidentiality. Privacy. Availability.
- 3. Security Threats in the E-commerce Malicious Code. Phishing. Hacking. Credit card fraud. Spoofing.
- 4. Technology Solutions Protecting Internet communications (encryption) Securing channels of communication (SSL, S-HTTP, VPNs) Protecting networks (firewalls) Protecting servers and clients
- 5. Protecting Internet Communications: Encryption Encryption: The process of transforming plain text or data into cipher text that cannot be read by anyone other than the sender and receiver. Purpose: Secure stored information and information transmission. Provides: Message integrity Non Denial Authentication Confidentiality
- 6. Symmetric Key Encryption Also known as secret key encryption. Both the sender and receiver use the same digital key to encrypt and decrypt message. Requires a different set of keys for each transaction.
- 7. Public Key Encryption Public key cryptography solves symmetric key encryption problem of having to exchange secret key Uses two mathematically related digital keys – public key (widely disseminated) and private key (kept secret by owner) Both keys are used to encrypt and decrypt message Once key is used to encrypt message, same key cannot be used to decrypt message
- 8. Digital Envelopes Addresses weaknesses of public key encryption (computationally slow, decreases transmission speed, increases processing time) and symmetric key encryption (faster, but more secure) Uses symmetric key encryption to encrypt document but public key encryption to encrypt and send symmetric key
- 9. Securing Channels of Communication Secure Sockets Layer (SSL): Most common form of securing channels of communication. S-HTTP: Alternative method; provides a secure message-oriented communications protocol. Virtual Private Networks (VPNs): Allow remote users to securely access internal networks via the Internet, using Point-to-Point Tunneling Protocol (PPTP).
- 10. Protecting Networks: Firewalls and Proxy Servers Firewall: Hardware or software filters communications packets and prevents some packets from entering the network based on a security policy. Proxy servers: Software servers that handle all communications originating from or being sent to the Internet (act as “spokesperson” or “bodyguard” for the organization).
- 11. Protecting Servers and Clients Operating system controls: Authentication and access control mechanisms. Anti-virus software: Easiest and least expensive way to prevent threats to system integrity.