‏إظهار الرسائل ذات التسميات E-commerce. إظهار كافة الرسائل
‏إظهار الرسائل ذات التسميات E-commerce. إظهار كافة الرسائل

E-commerce Security Issues

First of all e-commerce is surrounded by different issues such as commercial, Network infrastructure, Social and Cultural and Security issues are presented below which are important for successful business. E-commerce security issues are frequently aired in the press and are certainly important. Customers are concerned that the item ordered won’t materialize, or be as described. As (much worse) they worry about their social security number and credit card details being misappropriated. However rare, these things do happen, and customers need to be assured that all e-commerce security issues have been covered. Your guarantees and returns policies must be stated on the website and they must be adhered to. Let us first state the security attacks on e-commerce process and Security goals we want to achieve for successful e-commerce.

Attacks on Security
Security attacks can be classified in the following categories depending on the nature of the attacker.

a)      Passive Attacks
The attacker can only eavesdrop or monitor the network traffic. Typically, this is the easiest form of attack and can be performed without difficulty in many networking environments, e.g. broadcast type networks such as Ethernet and wireless networks.

b)      Active Attacks
The attacker is not only able to listen to the transmission but is also able to actively alter or obstruct it. Furthermore, depending on the attackers actions, the following subcategories can be used to cover to cover the majority to cover the majority of attacks.

c)       Eavesdropping
This is attack is used to gain knowledge of the transmitted data. This is passive attack which is easily performed in many networking environments as motioned above. However, this attack can easily perform in many networking environments. However this attack can easily be prevented by using an encryption scheme to protect the transmitted data.

d)      Traffic Analysis
The main goal of this attack is not to gain direct knowledge about the transmitted data, but to extra information from the characteristics of the transmission, e.g. amount of data transmitted, identity of the communicating nodes etc. This information may allow the attacked to deduce sensitive information, e.g., the roes of the communicating nodes, their position etc. Unlike the previously described attack, this one is more difficult to prevent.

e)      Impersonation
Here, the attacker uses the identity of another node to gain unauthorized access to resource or data. This attack is often used as a prerequisite to eavesdropping. By impersonating a legitimate node, the attacker can try to gain access to the encryption key used to protect the transmitted data. Once, this key is known by the attacker, she can successfully perform the eavesdropping attack.


f)       Modification
This attack modifies data during the transmission between the communicating nodes, implying that the communicating nodes do not share the same view of the transmitted data. An example could be when the transmitted data represents a financial transaction where the attacker has modified the transactions value.

g)      Insertion
This attack involves an unauthorized party, who inserts new data claiming that it originates from a legitimate party. This attack is related to that of impersonation.

You may also wanted to view the following related posts

You can view the following other posts

    مرسلة بواسطة في هناك تعليق واحد:

    Risk of e-commerce

    As e-commerce evolves, it will present huge risks for those who don’t take advantage of it. The main risk of e-commerce is that the business won’t capitalize on all it has to offer, while the competition moves ahead. The traditional supply chain consists of the manufacturer, the distributor; the traditional supply chain consists of the manufacturer, the distributor, the retailer, and the end consumer. E-commerce is changing this linear view of the supply chain. Instead of goods flowing from one participant to the next, this new online marketplace can connect each participant to the end-consumer. For some links in the supply chain, increased access to customers could be dangerous as partners could even become competitors.

    In the physical world today, there are requirements for documents to be in writing and for hand-written signatures. Such requirements need to be translated into the electronic realm with the rapid development of electronic commerce and to resolve questions raised regarding the applicability of such legislation to the unique features of the electronic regime. The advent or e-commerce and the use of the digital medium as an alternative to the physical, have created some novel legal issues where there are no clear answers.

    The users of information technology must have trust in the security of information and communication infrastructures, network and systems, in the confidentiality, integrity, and availability of data on them, and in the ability to prove the origin and receipt of data. For communication and transactions occurring over a faceless network, there is a need or reliable methods to authenticate a person’s identity and to ensure the integrity of the electronically transmitted documents.

    The concepts of a secure electronic record and a secure electronic signature, and the rebuttable presumptions that flow from that status, are thus necessary for a viable system of electronic commerce. In the context of electronic commerce, none of the usual indicators of reliability present in a paper-based transaction (the use of paper, letterhead, etc.) exist, making it difficult to know when one can rely on the integrity and authenticity of an electronic record. This lack of reliability can make proving one’s case in court virtually impossible. Rebuttable presumptions with respect to secure records and secure signatures put a relying partying a position to know, at the time of receipt and/or reliance, whether the message is authentic and the integrity of its contents intact and, equally important, whether it will be able to establish both of these facts in court in the event of subsequent disputes.

    You may also wanted to view the following related posts

    You can view the following other posts

    مرسلة بواسطة في ليست هناك تعليقات:

    Benefits of e-commerce

    Use of e-commerce technologies helps speed up the flow of information and to eliminate unnecessary human intervention; the computer can now accomplish what computers do better than people process routine business transactions quickly and accurately, 24 hours a day. This in turn, frees up people to handle tasks that computers may never be able to do exercising judgment, creativity, and experience to manage exceptions, solve problems and continually improve business processes.

            E-commerce is growing in importance and means unprecedented opportunities for everyone. When a business takes advantage of the power of e-commerce, it will be able to.


            i.            Increase customer satisfaction
    Internet is always open, even on holidays; business is thus always open, 24 hours a day, 7 days a week and 365 days a year. Customers will appreciate the extra access to product updates, shipping details, billing information and more. And since the internet knows no boundaries, customers can shop from home, work, or anywhere they can make a connection. Besides, by connecting the e-commerce and shipping systems, it would be possible to ship products faster and for less money.

          ii.            Increase sales volumes
    The Internet is a new channel to reach new customers. With a web site, a company can automatically become a global provider of goods and services, with an edge over even the largest competitors. Interactive selling is advantageous because a company is no longer limited by shelf-space or inventory concerns but instead offer all products to suit the customers exact specifications.

        iii.            Decrease costs of doing business
    E-commerce helps cut out or streamline processes that eat away profits. For instance exchange of information from advertising to availability updates, can add to the cost of sale. However, the web site can be an efficient, cost-effective communication vehicle. Customers can find timely accurate information in one place when they need it. By using e-commerce, everything from purchase orders to funds transfer can be handled faster and more efficiently. Even payment processing and bookkeeping are easier.


    You may also wanted to view the following related posts

    You can view the following other posts

    مرسلة بواسطة في ليست هناك تعليقات:

    Factors Affecting the Success of E-Government


    For successful E-government endeavor, two critical requirements are needed: availability and accessibility. E-government transactions have to be available 24/7. This provides citizens, partners and employees with the flexibility to process transactions outside standard government office hours. With the inclusion of websites of E-governments, and E-government website needs to satisfy this “high availability” requirement. Also, the E-government endeavor is critically dependent on the accessibility of its integral websites. If the website is not accessible to the intended target users it will not be successful. The causes of failure of the E-government program in developing countries are:




    •  Lack of training schemes and qualified staff, which makes it hard to go with such a new trend like E-government. 
    •  Lack of educating citizens about the value and benefits of E-government, that the government itself should play the main role in this issue. 
    •  Lack of change management efforts. 
    •  High turnover rates of government IT staff because of noncompetitive payment and employment conditions as compared to private sector. 
    •  Lack of public sector skills, and as a result E-government projects are often outsourced to the private sector. 
    •  Large design-reality gaps as a result of using and off-the-shelf solution from an industrialized country for a developing country. 
    •  The need of appropriate infrastructure that means that weak infrastructure will be the first obstacle in employing the E-government program. 
    • · The large gap between the skilled leaders who can afford technology, and the unskillful poor who can’t afford the same.

    You may also wanted to view the following related posts

    You can view the following other posts


    مرسلة بواسطة في ليست هناك تعليقات:

    Challenges and Opportunities for Developing a Successful E-Government

    E-government initiatives aimed at raising the level of government performance in general, where the proper application of these initiatives lead to upgrade the governmental services provided to citizens and the private sector and enhance the effectiveness of government work internally, in addition to broadening the participation of citizens in decision-making process. However, many studies indicate that a large proportion of initiatives to implement E-government around the world did not succeed in achieving these promised goals. There are, in fact, global consensuses on the existence of the need for deeper studies to understand the real reasons behind this failure, but in spite of higher percentage E-government projects that failed to achieve its goals globally, the world is witnessing a comprehensive consensus recognizes that failed to achieve its goals globally, the world is witnessing a comprehensive consensus recognizes that there is still the possibility of E-government initiatives to fulfill their all promises, but the underlying potential of these initiatives will only be achieved through access to a better understanding of the obstacles they faced and therefore to work out ways to overcome these obstacles. The most challenges that are expected to be faced during the implementation of an E-government program have been summarized below. 

    1. Infrastructure Development: All countries implementing E-government have struggled to develop a basic infrastructure to take advantage of new technologies and communications tools. Many developing countries, even if possessing the will, do not have the infrastructure necessary to immediately deploy E-government services throughout their territory. 

    Recommendations: 
    • Develop projects that are compatible with the nation’s telecom infrastructure. 
    • Introduce telecom competition and lift regulation on wireless and other digital technologies to accelerate their deployment. 
    • Consider the government’s current use of technology and learn from past success and failures. 
    • Establish and action framework at the beginning of the process to allow for a rational and coordinated investment effort downs the road. 

    2. Law and Public Policy: The application of information Technology and Communication (ICT) to government may encounter legal or policy barriers. Legislatures must ensure the laws are updated to recognize electronic documents and transactions. Policy makers implementing E-government must consider the impact of law and public policy. 

    Recommendations: 
    • Consult with stakeholders to access how existing laws may impede the desired results. 
    • Give legal status to online publication of government information. 
    • Clarify laws and regulations to allow electronic filings with government agencies. 
    • Reform processes by simplifying regulations and procedures. 

    3. Digital Divide: The digital divide is the gap between people who have access to the Internet and those who do not. Those without access cannot access information that can provide economic opportunities, and cannot share in the benefits of E-government. 

    Recommendations: 
    •  Provide communal access through village computer centers. 
    •  Combine access with training. 
    •  Provide incentives to the private sector to donate equipment and training. 
    •  Emphasize local language and content tailored to different communities. 
    •  Use for-profit entrepreneurs to build and sustain access points in small communities. 

    4. E-Literacy: E- Literacy refers to marginalized groups who are unable to make use of information and communication technologies because they are not computer literate. With the digital revolution there is a very real danger that the world will be divided into the “information rich” and the “information poor”. E-government has the potential of either equalizing access to government and its services or increasing the barriers to participation. 

    Recommendations: 
    •  Ensure that content is in local languages and that interfaces are easy to use. 
    •  Develop applications that use speech or pictures in addition to, or instead of, written text. 
    •  Include and educational component in E-government projects. 
    •  Create programs that include traditional media, like radio programs or newspaper columns, where citizens can learn about E-government. 
    •  Special attention should be given to groups difficult to integrate (women, elderly, immigrants).

    You may also wanted to view the following related posts

    You can view the following other posts


    مرسلة بواسطة في ليست هناك تعليقات:

    Classification of E-commerce by transaction partners

    Following are the Classification of E-commerce by transaction partners.

    i) Business-to-business (B2B)

         Business-to-business (B2B) is the exchange of products, services or information between business entities. Web based B-to-B includes:
    •  Direct selling and support to business: In which customers can by and also get technical support from the business.
    •  E-procurement (also known as industry portals): Where a purchasing agent can shop for supplies from vendors, request proposals, and in some cases, bid to make a purchase at a desired price.
    •  Information sites: It provides information about a particular industry for its companies and their employees. These include specialized search sites and trade and industry standards organization sites.
    ii) Business-to-consumer (B2C)

         The exchange of products, information or services between business and consumers in a retailing relationship. Some of the first examples of B-to-C e-commerce were amazon.com and dell.com in the USA and lastminutes.com in the UK. In this case, the 'c' represents either consumer or customer. 

    iii) Business-to-Government(B2G)

    The exchange of information, services and products between business organizations and government agencies on-line. This may include.
    • E-procurement services: In which business learn about purchasing needs of agencies and provide services.
    • A virtual workplace: In which business and government agency could coordinate the work on a contracted project by collaborating on-line to coordinate on-line meetings, review plans and manage progress.
    • Rental of on-line application and databases: These are especially for use by government agencies.

    iv) Consumer-to-Consumer (C2C)

     In this category consumers interact directly with other consumers. They exchange information such as.
    •  Expert knowledge: Where one person asks a question about anything and gets an e-mail reply from the community of other individuals, as in the case of the New York Times-affiliated abuzz.com website.
    • ·Opinions: About companies and products, for example epinions.com
    v) Government-to-Business (G2B)

          The exchange of information, services and products between government agencies and business organizations. Government sites now enable the exchange between government and business of:
    • Information, guidance and advice for business on international trading, sources of funding and support, facilities.
    • A database of laws, regulations and government policy for industry sectors.
    • On-line application and submission of official forms.
    • On-line payment facilities.
    This improves accuracy, increases speed and reduces costs, so businesses are given financial incentives to use electronic-form submission and payment facilities.

    vi) Government-to-Consumer (G2C)

    Government sites offering information, forms and facilities to conduct transactions of individuals, including paying bills and submitting official forms on-line such as tax returns.

    vii) Government-to-Government (G2G)

    Government-to-government transactions within countries linking local governments together and also international governments.


    You may also wanted to view the following related posts

    You can view the following other posts

    مرسلة بواسطة في ليست هناك تعليقات:

    Defining e-commerce

    E-commerce is a new way of conducting, managing an executing business transactions using modern information technology. E-commerce is a ‘commerce based on bytes’. E-commerce, defined simply, is the commercial transaction of services in an electronic format. In general terms, e-commercial is a business methodology that addresses the needs of organizations, traders and consumers to reduce costs while improving the quality of goods and services and increasing the speed of service delivery. It may also be referred to as the paperless exchange of business information using Electronic Data Interchange, Electronic Fund Transfer etc. E-commerce is not only about simple transactions of data but also general commercial acts such as publicity, advertisements, negotiations contracts and fund settlements. It refers to all forms of transactions relating to commercial activities including both organizations and individuals that are based upon the processing and transmission of digitized data, including text sound and visual images. E-commerce is thus a business practice and involves use of computers, computer system or computer networks. 

          The World Trade Organization (WTO) Ministerial Declaration on E-commerce defines e-commerce as, “the production, distribution, marketing, sales of delivery of goods and services by electronic means”. The six main instruments of e-commerce that have been recognized by WTO are telephone, fax, TV, electronic payment and money transfer systems, EDI (electronic data interchange) and the internet. 

        EDI is the electronic transfer of standardized business transaction between a sender and receiver computer, over some kind of private network or Value Added Network (VAN). EDI was developed to integrate information across larger parts of an organization's value chain from design to maintenance so that manufacturers could share information with designers, maintenance and other partners and stakeholders.

        E-commerce has provided us a medium to facilitate commercial transactions in an efficient manner. Companies have moved up in the value chain by adopting the e-commerce practices. It should not be forgotten that every adoption of a new technology and new process would mean new ‘costs’ and ‘risks’. That is, adoption may or may not be successful. If the adoption is successful, then it becomes and established business practice in no time. If the If the adoption is unsuccessful then it is likely that the process of adoption may take some time, as the ‘learning’ phase is still not over. The first phase of e-commerce threw up a new business nomenclature using various permutations and combinations of ‘Business’ and ‘Consumers’, like ‘Business-to-Business’ (B2B), ‘Business-to-Consumer’ (B2C), ‘Consumer-to-Business’ (C2B) and ‘Consumer-to-Consumer’ (C2C).

    What about E-Business?

    As with e-commerce, e-business(electronic business) also has a number of different definitions and is used in a number of different contexts. Today, major corporations are rethinking their businesses in terms of the Internet an its new culture and capabilities and this is what some see as e-business.


    E-business is the conduct of business on the Internet, not only buying and selling but also servicing customers and selling but also servicing customers and collaborating wit business partners.

    E-business includes customer service (e-service) and intra-business tasks.

    E-business is the transformation of key business process through the use of Internet technologies. An e-business is a company that can adapt to constant and continual change.


    You may also wanted to view the following related posts

    You can view the following other posts

    مرسلة بواسطة في ليست هناك تعليقات:
    الاشتراك في: الرسائل (Atom)

    فيديو الأسبوع