E-Commerce Module 10 Security Threats To E-Commerce Part2

Front 1

What security measures can reduce or eliminate intellectual property theft?

Back 1

Technologies that reduce or eliminate intellectual property theft include software metering, digital watermarks, and digital envelopes. Software metering systems use the Internet to detect unauthorized copies of digital content. Digital watermarks provide a way of embedding a hidden identifier in a digital file, such as a graphic or audio file. Digital envelopes prevent viewing of content without the user injuring a key code.

Front 2

What do all digital watermarks do at a minimum?

Back 2

Identify the source of intellectual property.

Front 3

What are digital certificates used for?

Back 3

Verify the user or web site is who they claim to be.

Front 4

What does encryption do?

Back 4

It converts data so that it cannot easily be read without knowing the secret code.

Front 5

Would hash coding be sufficient for sending a credit card number over the Internet? Why or why not?

Back 5

No. Hash coating simply the shores that the message has not changed; it does not prevent the data from being viewed.

Front 6

For secure e-mail communications, which is generally better, public key or private key encryption? Why?

Back 6

Public key encryption, because any user can use the public key to encrypt message. This allows messages to be sent without a preliminary transaction.

Front 7

Will the firewall protect the corporate Web server from unauthorized access? Why or why not?

Back 7

No. The firewall protects servers and network resources within the private, trusted network. A Web server is generally located outside the trusted area of the network has its purpose is to provide information to the outside world.

Front 8

For each of the following related and separate issues of protecting intellectual property, protecting the client computer, protecting the transaction, and protecting the server identify the respective technologies that address the issue.

Back 8

Intellectual property theft -- software metering, digital watermarks, and digital envelopes. Protecting the client computer – anti-virus software, not installing files or executing attachments from unknown sources, certificates. Protecting the transaction -- message encryption and hash coding. Protecting the server -- digital certificates, username/password pairs, and access control lists on the Web server; firewalls; secure sockets layer(SSL) and the secure hypertext transfer protocol(S-HTTP)

Front 9

What are the three common categories of firewalls and what is the firewall?

Back 9

Firewalls protect a network by establishing a line of defense between the network and other networks. Computers that pass all traffic both inbound and held onto their systems permitting only authorized traffic to pass are firewalls. Three types of firewalls are packing filters, the way servers, and proxy servers. Packet filters examine the data flowing between the secure network in the Internet and permits organize access according to some preprogrammed set of rules. Gateway servers screen traffic taste on the application to a request. And proxy servers are computers that articulate with the Internet on behalf of the commercial network to determine whether the request should be passed along to the commercial network.

Front 10

SSL and S-HTTP, both do what?

Back 10

Both systems encrypt outgoing messages in the encrypt incoming messages automatically and transparently.

Front 11

Is it difficult to obtain SSL capabilities?

Back 11

No. All significant Web servers on the market today have SSL capabilities as a standard feature.