# data[].attributes.body
Necessity Threats

Also know as delay or denial threats, disrupt or deny normal computer processing.  -A program that has experienced a necessity threat retards processing an intolerably slow speed.

In general, slowing down any Internet service will drive customers to competitors’ Web or commerce sites, possibly causing them to never return to the original commerce site.

Electronic Data Breaches

Considering the endless advancement of technology, one risk that has emerged as one of the most common threats to small businesses is a data breach. Some small businesses lack an IT department and/or advanced security measures, putting themselves at an increased risk of a cyber attack.

Server Threats

The server is the third link in the client-Internet-Server trio embodying the e-commerce server. Servers have vulnerabilities that can be exploited by anyone determined to cause destruction or to acquire information illegally.

# data[].attributes.body
Security Architecture Threats
Security professional makes the case for stronger security. It important to point out not only the benefits of good security, but also the potential risks of not implementing good practices and procedures. These threats to security and understand how the various protection mechanisms discussed throughout this chapter can be used to raise the level of security.

Incremental Attacks
The goal of an incremental attack is to make a change slowly over time. By making such a small change over such a long period, an attacker hopes to remain undetected. Two primary incremental attacks include data diddling, which is possible if the attacker has access to the system and can make small incremental changes to data or files and a salami attack, which is similar to data diddling but involves making small changes to financial accounts or records.

Asynchronous Attacks
Asynchronous attacks are a form of attack that typically targets timing. The objective is to exploit the delay between the time of check (TOC) and the time of use (TOU). These attacks are sometimes called race conditions because the attacker races to make a change to the object after it has been changed but before the system uses it.

Back Doors
Back doors are another potential threat to the security of systems and software. Back doors, which are also sometimes referred to as maintainance hooks, are used by programmers during development to allow easy access to a piece of software. Often these back doors are undocumented. A back door can be used when software is developed in sections and developers want a means of accessing certain parts of the program without having to run through all the code. If back doors are not removed before the release of the software, they can allow an attacker to bypass security mechanisms and access the program.

# data[].attributes.body
Database Threats

E-commerce systems store user data and retrieve product information from databases connected to the web server.

Necessity Threats

The purpose of necessity threat, is to disrupt normal computer processing or delay processing entirely.

Server Threats

The server is the third link in the client-Internet-Server trio embodying the e-commerce server. Servers have vulnerabilities that can be exploited by anyone determined to cause destruction or to acquire information illegally.

Web Server Threats

Web server’s software is designed to deliver web pages by responding to HTTP requests. A web server can compromise secrecy if it keeps the default setting of automatic directory listings selected.

# data[].attributes.body
Company Starbucks and Dunkin Donuts

Demographic - A purchase from a coffee shop is considered a luxury for most people rather than a necessity.  These individuals will brew coffee at home when they do not have extra income

Technological - Often, the newest, most innovative products are very expensive.  They are also risky because there is no guarantee customers will respond positively, employees must be trained frequently, and the system may have glitches.  Social media advertising does not necessarily reach consumers of all ages.  Companies need to be cautious not to completely neglect all other areas of advertising, such as print and   television

Social-Cultural - In general, foods served at coffee shops contain high amounts of carbohydrates, fat, and sugar (ex: muffins, donuts, bagels, danishes).  In order to better compete, a company may need to offer more options to appease the health conscious as well as those who are not.  This may increase inventory costs, wasted foods, and the number of suppliers.

# data[].attributes.body
•Secrecy
–Prevention of unauthorized information disclosure and technical issue which is requiring sophisticated physical and logical mechanisms. Example,

# data[].attributes.body
1)      Confidentiality Threats

Confidentiality is the prevention of unauthorized information disclosure. Breaching confidentiality on the internet is not difficult.

2)      Integrity Threats

An integrity threat exists when an unauthorized party can alter a message stream of information. Unprotected banking transactions are subject to integrity violations.

3)      Availability Threats

The purpose of availability threats, also known as delay or denial threats, is to disrupt normal computer processing or to deny processing entirely. For example, if the processing speed of a single ATM machine transaction slows from one or two seconds to 30 seconds, users will abandon ATM machines entirely.

# data[].attributes.body
• secrecy threats
Unauthoruzed information disclosure.

Example: sniffer programs, backdoor

• integrity threats
When unauthorized party can alter a message stream of information

Example: cybervandelism, masquerading or spoofing

• necessity threats
To deny, delay or denial-of -service(DoS) attack, is to disrupt normal computer processing or deny processing entirely.

Example: DoS attacks,
DDoS attacks.

# data[].attributes.body
1.Secrecy threats
protection against unauthorized data disclosure and authentication of data source
-e.g: secrecy threat occurs when a user accesses a Web site, then goes to another one that can obtain information from the previous site that can be accessed by any user on the network that can access the server to obtain private information.

2.Integrity threats
-Also known as active wiretapping,prevention against unauthorized data modification
-e.g: Unprotected banking transactions, such as deposit amount transmitted over internet,are subject to integrity violations

3.Necessity threats
-occurs as delay,denial, or denial of service (DoS) attack, is to disrupt normal computer processing, or deny processing entirely.

-e.g: If the processing speed of a single atm transaction sometimes failed to change that login and password. This has given rise to a new avenue of entry into networks

4.  Threats to wireless networks
-Networks can use wireless access points (WAPs) to provide network connections to computers and other mobile devices within a range of several hundred feet.If not protected, wireless network allowed anyone within that range to log in and have access to any resources connected that network

-e.g:hackers can steal information from a company, obtain unauthorized access to applications, and even disrupt operation of the network.

# data[].attributes.body
1. Secrecy threats
- prevention of unauthorized information disclosure

- e.g: theft of sensitive or personal information such as names, address, credit and debit card numbers, IC number, passwords, logins

2. Integrity threats
- exists when an unauthorized party can change a message stream of information

- e.g: deposit amount, cybervandalism (change a website's regular content with his or her own content)

3. Threats to Physical Security of Internet Communications Channel
- an individual's internet service can be interrupted by destruction of that user's link to the internet

4. Threats to Wireless Networks
- WEP (Wireless Encryption Protocol) is a a set of rules for encrypting transmissions from wireless devices to the WAPs

-e.g: Wardrivers drive around to find accessible networks and mark it with chalk (warchalking