资源描述:
《electronic commerce security文档》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、Chapter12ElectronicCommerceSecurity12.1Introduction:Whileelectronicbusinessbringsgreatconvenienceforbothenterprisesandcustomers,manyrelatedriskshaveappeared.Whenacompanyexposesincreasingamountsofnetworkedresourcestocustomersandemployees,digitalsecuri
2、tyandrelatedliabilitiesbecomemajorconcerns.Therearesomefiguresthatshowwhatlosseshavebeensuffered:lFinanciallossesduetocomputersecuritybreachesin2001amountedtoover$377million(US$),accordingtoCSI/FBISurvey”lAccordingtoLloyds’s,theLoveBugemailvirusthats
3、weptthroughcomputersaroundtheworldlastyearcausedestimatedlossesof$15.3billion(US$)asaresultofcomputerdowntimeanddamagedsoftware.lRichardClarke,theCyberSecurityChieffortheU.S.notedthatmalicioushackerattacksandcomputervirusescostU.S.companies$12billion
4、(US$)in2001,$2billionofwhichwasfromthe“Nimda”virus,whichatonepointtookovermorethan350,000webserversintheU.S.alone.Figure12-1DollaramountofLossesbytypeWithalltheinformationavailableoncomputersystemsandtherelativeeasewithwhichitcanbeaccessedbyhackers,i
5、tisnowonderthattheftofproprietaryinformationaccountsforsuchalargecosttocompanies.Withtheproperusernameandpassword,anyonecanbuyorsellfromyouron-linetradingaccount.Theycanalsotransferfundsoutofyouron-linebankaccount.Withasocialsecuritynumber,someonecan
6、getaccesstoyourpersonalcredithistoryfromon-linecredithistoryproviders,andwithyourcreditcardnumber,theskyisthelimit.Internetfraudistheintentionalmisrepresentationorconcealmentofinformationinordertodeceiveormisleadviatheinternet.AccordingtoCyberSource1
7、2,about5%to6%ofatypicalinternetretailer’stransactionsarefraudulent,comparedtolessthan½%fortraditionalretailers.Figure12-2Anaveragecompany’syearlycostofcomputercrime12.2Risksofnetworktransactionsandgeneralideasformanagementofsecurity12.2.1RisksinElect
8、ronicCommerceElectroniccommerceisvulnerabletoawiderangofsecuritythreats:lContractingandcontractenforcementinelectroniccommerce.Twopartiescanexchangeandacceptanofferon-line,butwithoutaphysicalsignature,doesthisconstituteanenforceablecontract?lSecrecya