E-Commerce Security Systems LEARNING OBJECTIVES To know basics of E-Commerce Security Systems To understand various types of E-Commerce threats To learn about dimensions of E-Commerce security To know about security technologies in E-Commerce transaction version CHAPTER version CHAPTER - - - - Chapter E-Commerce Security Systems . Malicious code threats: Within an E-Commerce site, there are multiple vulnerable areas that can serve as an intrusion point for a hacker to gain payment and user information. Using malware, Cross Site Scripting or SQL Injection, an attacker will extract the credit card information and sell the acquired data on black markets. Fraud is then committed to extract the greatest value possible through E-Commerce transactions or ATM withdrawals, etc.
. Distributed Denial of Service (DDoS) Attacks: It is a process of taking down an E-Commerce site by sending continious overwhelming request to its server. This attack will be conducted from numerous unidentified computers using botnet. This attack will slow down and make the server inoperative.
DDoS attacks is also called as network flooding. Viruses cause harm to the computers thereby harms the efficient and smooth functioning of E-Commerce. Some viruses destroy all the information stored in a computer and cause huge loss of revenue and time. The emergence of computer viruses and their variants has rapidly increased over the past decade.
The Internet has turned to be the best medium for the spread of viruses. Many new viruses directly use the Internet as their mode of transmission causing huge economic losses to E-businesses. . Information leakage: The leakage of trade secrets in E-Commerce mainly includes two aspects: (a) the content of the transaction between the vendor and customer is stolen by the third party; (b) the documents provided by the merchant to the customer or vice versa are illegally used by the other.
This intercepting and stealing of online documents is called information leakage. . Tampering: E-Commerce has the problem of the authenticity and integrity of business information. When hackers grasp the data transmitted on the network, it can be falsified in the middle through various technical means, and then sent to the destination, thereby destroying the authenticity and integrity of the data.
. Payment frauds: Payment frauds have subsets like Friendly fraud (when customer demands false reclaim or refund), Clean fraud (when a stolen credit card is used to make a purchase) Triangulation fraud (fake online shops offering cheapest price and collect credit card data) etc. Phishing is also a E-Commerce threat in which a target is contacted by e-mail, telephone or text message by someone who pretend himself as a genuine authority. They try to trap individuals to provide sensitive data such as, banking and credit card details, OTP, PIN or passwords.
Once they succeed, the results would lead to devastating acts such as identity theft and financial loss. version CHAPTER version CHAPTER - - - - Chapter E-Commerce Security Systems