1. E-Commerce Security Brett Hinshaw Kevin Hooker Jeff Hunter Shane Worrell

2. Introduction What is e-commerce What is e-commerce What is the problem? What is the problem? Why is this important to you? Why is this important to you? What is being done about it? What is being done about it? What can you do to protect yourself? What can you do to protect yourself? What does the future hold for this issue? What does the future hold for this issue?

3. What is E-Commerce? Refers to the exchange of goods and services over the Internet Refers to the exchange of goods and services over the Internet Consumer transactions Consumer transactions Business to business transactions Business to business transactions Service industry transactions Service industry transactions

4. What is the problem? Providing a secure and safe environment for consumers to do business online Providing a secure and safe environment for consumers to do business online No side effects No side effects Must provide: Must provide: AuthenticationAuthentication AuthorizationAuthorization EncryptionEncryption AuditingAuditing

5. Why is this important to you? E-Commerce affects anyone who shops online E-Commerce affects anyone who shops online Unsecure e-commerce can lead to identity theft, credit card theft, vulnerable bank accounts, etc Unsecure e-commerce can lead to identity theft, credit card theft, vulnerable bank accounts, etc Companies that consumers are associated with can be affected and therefore indirectly affect the consumer Companies that consumers are associated with can be affected and therefore indirectly affect the consumer

6. What is being done about e- commerce security issues? Build security into web applications in the design state Detailed Risk assessmentDetailed Risk assessment Key informationKey information Transaction details Transaction details Analyze threats Analyze threats Countermeasures Countermeasures SSL – Secure Socket Layer SSL – Secure Socket Layer Visa & Mastercard developed SET Visa & Mastercard developed SET

7. What is being done about e- commerce security issues? (cont.) Firewalls Firewalls Many companies use the Kerberos protocol Many companies use the Kerberos protocol Microsoft, Verisign & Webmethods developed XML (Extensible Markup Language) key management specification (XKMS) Microsoft, Verisign & Webmethods developed XML (Extensible Markup Language) key management specification (XKMS) Encryption of private information Encryption of private information

8. What can you do to protect yourself? Keep private data safe Keep private data safe Install a firewall Install a firewall Use anti-virus software Use anti-virus software Be smart about the sites you visit Be smart about the sites you visit

9. What does the future hold for this issue? E-commerce is safer than ever E-commerce is safer than ever It’s up to you It’s up to you It’s up to merchants It’s up to merchants US e-commerce sales will nearly double in the next five years US e-commerce sales will nearly double in the next five years Wi-Fi Security Wi-Fi Security

10. Summary What e-commerce is What e-commerce is Problems associated with e- commerce Problems associated with e- commerce Why it is important Why it is important What is being done about it What is being done about it How to protect yourself How to protect yourself The future of e-commerce The future of e-commerce