Security Threats for the E-Commerce?
I was wondering about the different types of security threats around the internet, e.g. Virus' and fraud, and how you would stop them getting into your computer.
1.XSS and CSRF attacks to hijack login sessions or reveal data to another site.
2.Social Engineering through emails to get you to install malicious software or login to fake login pages for say a bank, online casino, or something else.
3.Software vulnerabilities that are remotely executable allow arbitrary code to be ran on your machine. Depending on the privileges of the vulnerable process this can have different impacts. Use Data Execution Prevention on all processes under windows to help prevent this.
4.Social Engineering in general
5.Using public data in password recovery questions on websites.
6.Poor AV when installing software. It needs to be able to detect packers and have decent heuristics. Avira, Kaspersky, and Dr.Web do it the best.
7.No rootkit protection. The ones that come with an AV are poor. GMER, IceSword, and RKU are the best.
8. Poor Database filtering. SQL is the most common database query language. Sql injection allows an attacker to retrive and inject data from/to the database of the website.
Criminal eCommerce and the Web Models
[simpleaffiliate source="amazon" results="5"]e commerce security threats[/simpleaffiliate]
[simpleaffiliate source="clickbank" results="3"]e commerce security threats[/simpleaffiliate]
No comments:
Post a Comment