Recent

  • Show all results for ""
E-commerce Security Issues
40 Questions
1 Views

E-commerce Security Issues

Created by
@ObtainableDallas

Questions and Answers

What is a major drawback of symmetric key encryption?

  • It can be used without sharing keys.
  • It relies on a single key for encryption and decryption. (correct)
  • It requires a vast number of unique keys for all users. (correct)
  • It is immune to computational attacks.

    • In public key encryption, how is a message encrypted?

  • Utilizing the sender's public key.
  • With the recipient's public key. (correct)
  • Using the same private key that will later decrypt it.
  • By a randomly generated encryption key.

    • What information is included in a digital certificate?

  • Sender's personal address.
  • Recipient's private key.
  • Expiration date of the certificate. (correct)
  • Sender's password.

    • What role do Certification Authorities (CAs) play in digital certificates?

    <p>They act as trusted third parties that issue digital certificates.</p> Signup and view all the answers

    Which statement correctly describes the relationship between public and private keys?

    <p>The public key is used to encrypt; the private key is used to decrypt.</p> Signup and view all the answers

    Why is it problematic to send a symmetric key over an insecure medium?

    <p>It could be intercepted, compromising security.</p> Signup and view all the answers

    What function do digital certificates serve?

    <p>They verify the identity and public key ownership of the user.</p> Signup and view all the answers

    What best describes public key infrastructure (PKI)?

    <p>A framework for managing digital certificates and public key encryption.</p> Signup and view all the answers

    What is meant by the term 'nonrepudiation' in e-commerce security?

    <p>Preventing a party from denying an agreement after it has been made</p> Signup and view all the answers

    Which of the following is NOT one of the six key issues of e-commerce security?

    <p>Responsibility</p> Signup and view all the answers

    Where can data be intercepted in e-commerce transactions?

    <p>In the browser, between the browser and the server, and at the server</p> Signup and view all the answers

    What is the first step in ensuring data security during transmission?

    <p>Encrypting the data</p> Signup and view all the answers

    What does confidentiality refer to in the context of e-commerce security?

    <p>Protection against unauthorized access to sensitive data</p> Signup and view all the answers

    What is encryption primarily used for in e-commerce?

    <p>To safeguard data being transmitted over the network</p> Signup and view all the answers

    How can a user's personal data be compromised when left unattended on a computer?

    <p>Anyone can access the computer and view sensitive data</p> Signup and view all the answers

    What is one major limitation of communicating credit card information via email?

    <p>Hacker access to the email system can lead to data breaches</p> Signup and view all the answers

    What is the primary function of HTTPS protocols?

    <p>To secure data transfer and improve search ranking</p> Signup and view all the answers

    What should be avoided regarding client credit card information in an e-commerce setting?

    <p>Storing credit card information in the database</p> Signup and view all the answers

    What is an effective measure to secure the Admin Panel?

    <p>Changing passwords frequently and restricting user access</p> Signup and view all the answers

    What type of software is primarily used to detect and remove malware?

    <p>Anti-Malware software</p> Signup and view all the answers

    Which of the following measures helps protect user data on e-commerce websites?

    <p>Implementing SSL certificates</p> Signup and view all the answers

    What is a benefit of using Anti-Virus software, aside from detecting viruses?

    <p>It prevents any malware infection</p> Signup and view all the answers

    What is a potential danger of clicking on infected links sent via communication platforms?

    <p>It could install malware on your device</p> Signup and view all the answers

    What security measures should be taken to protect a payment gateway?

    <p>Utilize secure handling of transactions</p> Signup and view all the answers

    What is the primary difference between symmetric key cryptography and public key cryptography?

    <p>Public key cryptography uses one public and one private key.</p> Signup and view all the answers

    What ensures the authenticity of information in digital communications?

    <p>Digital signature</p> Signup and view all the answers

    Which of the following best describes cyber vandalism?

    <p>Defacing websites and creating malware.</p> Signup and view all the answers

    What constitutes credit card fraud?

    <p>Unauthorized purchasing using someone else's credit card information.</p> Signup and view all the answers

    Which attack is characterized by an attempt to manipulate data by pretending to be a trusted source?

    <p>Spoofing</p> Signup and view all the answers

    What type of code is designed to cause harm to computer systems?

    <p>Malicious code</p> Signup and view all the answers

    What is the main effect of a Denial of Service (DoS) attack?

    <p>Restricting access to services for authorized users</p> Signup and view all the answers

    What technique involves listening in on other people's communications?

    <p>Packet sniffing</p> Signup and view all the answers

    What is a primary benefit of using third-party payment processors like PayPal and Stripe?

    <p>They ensure better safety for customer data.</p> Signup and view all the answers

    What role do effective firewalls play in e-commerce security?

    <p>They protect against XSS and SQL injection attacks.</p> Signup and view all the answers

    Which of the following is a necessary step in ensuring PCI-DSS compliance?

    <p>Store credit card data securely.</p> Signup and view all the answers

    Why is it important to educate staff and clients about security?

    <p>To prevent unauthorized access to sensitive information.</p> Signup and view all the answers

    What should a robust security policy include?

    <p>An outline of acceptable and unacceptable behaviors.</p> Signup and view all the answers

    What is a critical step following a risk assessment in security management?

    <p>Creating an implementation plan.</p> Signup and view all the answers

    What is one of the additional security implementations mentioned for e-commerce stores?

    <p>Scanning for malware and backing up data.</p> Signup and view all the answers

    What is the purpose of creating a security organization?

    <p>To administer the security policy.</p> Signup and view all the answers

    Study Notes

    E-commerce Security Issues

    • Integrity: Safeguarding against unauthorized changes to data.
    • Nonrepudiation: Ensuring parties cannot deny their actions after transactions.
    • Authenticity: Verifying the source of data and identity.
    • Confidentiality: Preventing unauthorized access to sensitive information.
    • Privacy: Maintaining control over personal data and its disclosure.
    • Availability: Ensuring data is accessible and not delayed or removed.

    Data Interception Points

    • Data can be intercepted in three main areas:
      • In the browser: Users input sensitive information which can be accessed if the device is left unattended.
      • Between the browser and the server: Data in transit may be intercepted, even if encrypted.
      • In the server: Vulnerable to external attacks and unauthorized access.

    Security Measures

    • Encryption: Converts plaintext to ciphertext, protecting data during transmission.

      • Symmetric key cryptography: Same key for encryption and decryption.
      • Public key cryptography: Different keys for encryption (public) and decryption (private).

    • Digital Signature: E-signature that verifies the authenticity of information through encryption.

    • Security Certificates: Unique digital IDs for website identity verification.

    Common Security Threats

    • Hacking and Cyber Vandalism: Includes website defacement and malware creation.
    • Credit Card Fraud: Unauthorized use of credit card information for purchases.
    • Spoofing: Impersonating trusted entities to steal sensitive data.
    • Malicious Code: Includes viruses, worms, and Trojans that harm systems.
    • Denial of Service Attack: Overloading systems to restrict access for authorized users.
    • Sniffing: Eavesdropping on network traffic to capture sensitive information.

    E-commerce Security Solutions

    • Implement HTTPS and SSL Certificates: Encrypt data transfer, improving security and search ranking.
    • Use Anti-Malware and Anti-Virus Software: Protect systems from various malware infections.
    • Secure Admin Panel and Server: Use strong, frequently changed passwords and restrict access based on roles.
    • Safeguard Payment Gateways: Avoid storing credit card data; use third-party processors.
    • Deploy Firewalls: Block unauthorized access and mitigate cyber-attacks.
    • Educate Employees and Clients: Provide training on secure data handling and update access rights for former employees.
    • Perform Regular Security Scans: Identify malware and ensure data backups.
    • Conduct Risk Assessments: Catalog information assets and their importance to the organization.
    • Develop a Security Policy: Define protection protocols and roles.
    • Create an Implementation Plan: Outline actionable steps for achieving security goals.
    • Establish a Security Organization: Dedicated team to manage security policies and guidelines.

    Drawbacks of Symmetric Key Encryption

    • Vulnerability to Key Theft: Same key must be shared over potentially insecure channels.
    • Management Complexity: Requires a vast number of keys for millions of users.

    Public Key Encryption

    • Utilizes a pair of keys for secure messaging: one public (shared) and one private (kept secret).
    • Digital certificates link public keys to identities, authenticated by trusted Certification Authorities (CAs).
    • Digital Certificate Details: Includes subject's name, public key, serial number, expiration date, issuing authority’s signature, and more.

    Studying That Suits You

    Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

    Quiz Team

    Description

    This quiz explores the six key issues in e-commerce security, including integrity, nonrepudiation, authenticity, confidentiality, privacy, and availability. Understanding these concepts is crucial for safeguarding online transactions and maintaining trust in e-commerce platforms.

    More Quizzes Like This

    Electronic Commerce Security Chapter 2 Quiz
    32 questions

    Electronic Commerce Security Chapter 2 Quiz

    FinerCarnelian5448 avatar
    FinerCarnelian5448
    Data Availability and Security Quiz
    28 questions

    Data Availability and Security Quiz

    UnmatchedMandolin avatar
    UnmatchedMandolin
    E-commerce Security and Legal Aspects Quiz
    12 questions

    E-commerce Security and Legal Aspects Quiz

    MasterfulRomanArt avatar
    MasterfulRomanArt
    E-commerce Security and Risks
    14 questions

    E-commerce Security and Risks

    HighQualityFluxus avatar
    HighQualityFluxus
    Use Quizgecko on...
    Browser
    Open
    Browser
    Browser