Presentation is loading. Please wait.

Presentation is loading. Please wait.

Measuring Security and Trust in the Online Environment Geneva, 28 May 2008 Martin Schaaper OECD Directorate for Science, Technology and Industry Economic.

Similar presentations


Presentation on theme: "Measuring Security and Trust in the Online Environment Geneva, 28 May 2008 Martin Schaaper OECD Directorate for Science, Technology and Industry Economic."— Presentation transcript:

1 Measuring Security and Trust in the Online Environment Geneva, 28 May 2008 Martin Schaaper OECD Directorate for Science, Technology and Industry Economic Analysis and Statistics Division

2 Introduction Security vs. trust OECD Ministerial Meeting Measuring security and trust –Official data –Other sources

3 OECD model survey of ICT use by businesses 7. Did your business have any of the following IT security measures in place at ? –Virus checking or protection software which is regularly updated –Anti-spyware software which is regularly updated –Firewall –Spam filter –Secured communication between clients and servers (e.g. via SSL, SHTTP) –…/…

4 OECD model survey of ICT use by businesses 7. Continued –…/… –Authentication software or hardware for internal users –Authentication software or hardware for external users (e.g. customers) –Intrusion detection system –Regular back up of data critical to your business operations –Offsite data backup –No IT security measures in place

5 OECD model survey of ICT use by businesses 8. Did your business experience an attack by a virus or similar (for example, a trojan horse or worm) which has resulted in loss of data or time, or damage to software during ? Excluding: attacks which were successfully prevented by security measures in place. –No/Yes

6 OECD model survey of ICT use by businesses 14. Which of the following factors, if any, limited or prevented Internet selling by your business during ? –Products are not well suited to sell via the Internet –Security concerns –Privacy concerns –Prefer to maintain current business model, e.g. face to face interaction –Customers' or suppliers' computer systems are incompatible with yours –…/…

7 OECD model survey of ICT use by businesses 14. Continued –…/… –Insufficient level of customer demand for purchasing via the Internet –Uncertainty concerning legal/regulatory framework for selling over the Internet –Cost of development and/or maintenance is too high –Lack of skilled employees –No limitations to selling over the Internet –Not relevant –Other (please specify )

8 OECD model survey of ICT use by businesses 16. As at did your business' Web site have any of the following features? –Product catalogues or price lists –Customised Web page or information provided for repeat clients –Facility for collecting customer information on line –A privacy policy statement –A privacy seal or certification (trustmark) –…/…

9 OECD model survey of ICT use by businesses 16. Continued –…/… –An online ordering facility for your business' products –Facility for online payment –Provision of online after sales support –Order tracking available on line –A security policy statement –A security seal or certification (trustmark )

10 OECD model survey of ICT access and use by households and individuals 5. What are ALL the reasons for members of this household not having access to the Internet at home? –Not interested –Costs are too high –Lack of confidence, knowledge or skills –Concern that content is harmful –Have access to Internet elsewhere –Security concerns, for example, concerns about viruses –Privacy concerns, e.g. abuse of personal information –Other (please specify)

11 OECD model survey of ICT access and use by households and individuals 8. When using a computer at home in the last 12 months, how frequently did you back up files (such as documents, spreadsheets or digital photographs) which you created and kept on the computer? –Always or almost always –Sometimes –Never or hardly ever –Not applicable - I have not created files which I kept on a computer used at home

12 OECD model survey of ICT access and use by households and individuals 15. When using a computer to access the Internet at home in the last 12 months, have you experienced an attack by a virus or similar (for example, a Trojan horse or worm) which has resulted in loss of data or time, or damage to software? –No/Yes/Dont know

13 OECD model survey of ICT access and use by households and individuals 16. Was the computer you (mainly) used to access the Internet at home protected by: No/Yes/Dont know –Virus checking or protection software? –A firewall? –Anti-spyware software?

14 OECD model survey of ICT access and use by households and individuals 23. What were ALL the reasons for not buying or ordering goods or services for private use over the Internet in the last 12 months? –Not interested –Prefer to shop in person or deal personally with a service provider –Security concerns, for example, worried about giving debit or credit card details over the Internet –…/…

15 OECD model survey of ICT access and use by households and individuals 23. Continued –…/… –Privacy concerns, for example, worried about giving personal details over the Internet –Trust concerns, for example, worried about warranties, receiving goods or services, or returning goods –Lack of confidence, knowledge or skills –Speed of connection is too slow –Other (please specify)

16 Eurostat ICT model questionnaire on ICT use by households and individuals 2009

17

18

19

20 Some examples Access barriers Protection Problems encountered E-commerce barriers E-commerce problems Consumer trust enhancing measures Government and security

21 Access barriers Privacy or security concerns as one of the main reasons for not having access to the Internet at home (% of households without Internet access)

22 Protection Enterprises with Internet access with a firewall (%)

23 Problems encountered Internet users in the EU suffering from virus attacks or receiving spam (%)

24 E-commerce barriers Security concerns, e.g. over payments, as extremely important or very important barrier in limiting or preventing sales via the Internet (%)

25 E-commerce problems Problems encountered by individuals in the EU when buying/ordering goods or services over the Internet in the last 12 months (% of individuals who bought or ordered goods over the Internet in the last 12 months)

26 Consumer trust enhancing measures Enterprises that used trust marks, customer service/complaints mechanisms, or alternative dispute resolution mechanisms and informed about this on their Web sites, by category, 2005 (% enterprises with a Web site)

27 Government and security Security problems encountered by public authorities in Denmark, 2005 (%)

28 Some conclusions Despite increasing use of protection measures, security incidents still widespread Intensity of use impacts the results Credit card fraud: serious barrier, but low incidence Challenge for business: convince consumers e- commerce is safe Collecting (official) indicators is a statistical challenge, in particular for e-government and security

29 Online identity theft OECD Scoping paper on online identity theft: LOOK/NT00005CAE/$FILE/JT PDF ID theft occurs when a party acquires, transfers, possesses, or uses personal information of a natural or legal person in an unauthorised manner, with the intent to commit, or in connection with, fraud or other crimes. …/…

30 Online identity theft Data limitations Statistics do not provide a clear picture of the notion of victims which either covers individuals, governments, international organisations, business and/or industry, or the economy as a whole. Statistics do not measure the same types of frauds or crimes and are thus incomparable. Statistics gathered by public authorities for policy purposes vary from those collected by private businesses for commercial purposes. Direct and indirect losses data do not cover all victims and all types of ID theft cases.

31 Other data … Phishing Spoofing Spyware Viruses, worms, trojans and incidents Botnets (zombie machines) Modem hijacking Click fraud and search spam Secure sockets layer (SSL)

32 … and other sources Perception, opinion and usage surveys Surveys of security professionals and law enforcement agencies Consumer complaint and Internet fraud statistics Crime statistics European Network Information and Security Agency (ENISA)

33 Areas for improvement Data quality issues: understanding survey questions, reluctance of respondents to provide sensitive information, insufficient sample sizes More details on fraudulent payment card use and on spam E-government and security and trust: a real challenge, e.g. level of government Developing new indicators on online identity theft, e-crime, reporting security incidents and business management of e-security

34 Links OECD Guide: infoeconomy/guide Eurostat surveys and more: soc_pi_base.htm Papers –Measuring Security and Trust in the Online Environment: A View Using Official Data: –Scoping Study for the Measurement of Trust in the Online Environment:

35 THANK YOU!


Download ppt "Measuring Security and Trust in the Online Environment Geneva, 28 May 2008 Martin Schaaper OECD Directorate for Science, Technology and Industry Economic."

Similar presentations


Ads by Google