Web Security for E-Commerce

Abstract

This tutorial presents an overview of the major categories of Web site attacks, their effects, and possible countermeasures. The focus is the Web security necessary for a reasonable guarantee of secure e-commerce. The tutorial is intended for those who have little or no knowledge of Web security and its importance to e-commerce. It provides a basic understanding of the issues, the techniques, and the nomenclature used. An annotated bibliography points the reader to additional sources on specific topics.

Unveiling the Mask of Phishing: Threats, Preventive Measures, and Responsibilities

“…Digitally signed e-mail makes use of asymmetric key cryptography such as RSA and allows one to clearly distinguish the identity of sender. The ideology behind the scheme is that each user owns a pair of public key and private key [Boncella 2000]. Only the genuine user can sign a message with his/her own private key while the receiver can validate the originality of the message by using a relevant public key that is readily available to the public from a trustable third party.…”

Web and Web Security

“…An example would be a web browser using the HTTP protocol to request a web page from a web server. The details of this paradigm can be found in [Boncella 2000]. This concept is used to implement the service oriented architecture (SOA) which implements web services.…”

“…Currently SSL (Secure Sockets Layer), PKI (Public Key Infrastructure), and firewalls are able to meet these requirements for conventional web traffic using HTTP [Boncella, 2000 andBoncella, 2003]. However SSL and firewalls are inadequate to assure these requirements for web services.…”

“…See CAIS Volume 4, Article 11[Boncella, 2000] for an overview of the OSI and its layers and their functions.…”

Competitive Intelligence and the Web

“…The first of the concerns can be managed through the usual computer and network security methods [Boncella 2000, Boncella 2002].…”