Requirement for Secure e-commerce by maizatul akmar

Requirement for Secure e-commerce by maizatul akmar https://padlet.com/maizatul82/requirement lists the requirement you have satisfied. en-us 2017-04-10 11:05:47 UTC 2017-04-12 02:18:55 UTC hello@padlet.com BIG APPLE https://padlet.com/maizatul82/requirement/wish/165685742 (a) Secrecy
- prevent unauthorized persons from reading messages and business plans, obtaining credit card numbers or deriving other confidential information.
(b) Integrity
- enclose information in digital envelope that computer can automatically detect messages that been altered in transit.
(c) Availability
- provide delivery assurance for each message segment so that messages cannot be lost undetectably.
(d) Key management
- provide secure distribution and management of keys needed to provide secure communication.
(e) Non repudiation
- provide undeniable, end to end proof of each message's origin and recipient.
(f) Authentication
-securely identify clients and serves with digital signatures and certificates.

]]> 2017-04-10 14:35:58 UTC https://padlet.com/maizatul82/requirement/wish/165685742 The Five Infea https://padlet.com/maizatul82/requirement/wish/165814338 Secrecy - Prevent unauthorized persons from reading messages and business plan, obtaining credit card numbers, or deriving other confidential information.
Integrity - enclose information in a digital envelope so that the computer can automatically detect messages that have been altered in transit.
Availability - Provide delivery assurance for each messages segment so that messages or messages segments cannot be lost undetectably.
Key management - Provide secure distribution and management of keys needed to provide secure communications.
Nonrepudiation - Provides undeniable, end to end proof of each message's origin and recipient.
Authentication - Securely identify clients and servers with digital signature and certificates.

]]> 2017-04-11 05:37:25 UTC https://padlet.com/maizatul82/requirement/wish/165814338 GROUP 7 https://padlet.com/maizatul82/requirement/wish/165819816 Secrecy
- Prevent unautherozied persons from reading messages and business plans, obtaining credit card numbers or deriving other confidential information.
Integrity
-Enclose information ina digital envelope so that the computer can automatically detect messages that have been altered in transit.
Availability
- Provide delivery assurance for each message segment so that messages or message segments cannot be lost undetectably.
Key Management
- Provide secure distribution and management of keys needed to provide secure
communications.
Nonrepudiation
- Provide undeniable,
end-to-end proof of each message's origin and recipient.
Authentication
- Securely identify clients and servers with digital signatures and certificates]]> 2017-04-11 06:37:28 UTC https://padlet.com/maizatul82/requirement/wish/165819816 Group 8 https://padlet.com/maizatul82/requirement/wish/165822301 1. Authentication
-Securely identify clients and serves with digital signatures and certificates.

2. Integrity
- Enclose information in digital envelope that computer can automatically detect messages that been altered in transit.

3. Secrecy
- Prevent unauthorized persons from reading messages and business plan, obtaining credit card numbers, or deriving other confidential information.

4. Nonrepudiation
- Provides undeniable, end to end proof of each message's origin and recipient.

5. Key management
- provide secure distribution and management of keys needed to provide secure communication.

6. Availability
- Provide delivery assurance for each messages segment so that messages or messages segments cannot be lost undetectably.

]]> 2017-04-11 07:02:06 UTC https://padlet.com/maizatul82/requirement/wish/165822301 ASTRO GROUP https://padlet.com/maizatul82/requirement/wish/165829249 Auditability
Data should be recorded in such a way that it can be audited for integrity requirements.

Availability
Information should be available wherever and whenever requirement within time limit specified.

Confidential
Information should not be accessible to unauthorized person. It should not be intercepted during transmission.

Encryption
Information should be encrypted and decrypted only by authorized user.

Integrity
Information should not be altered during its transmission over the network.

]]> 2017-04-11 08:02:13 UTC https://padlet.com/maizatul82/requirement/wish/165829249 Nash Group https://padlet.com/maizatul82/requirement/wish/165829936 1. Integrity
- Enclose
information in digital envelope that computer can automatically detect messages
that been altered in transit.

2. Secrecy
- Prevent
unauthorized persons from reading messages and business plan, obtaining credit
card numbers, or deriving other confidential information.

3. Nonrepudiation
- Provides
undeniable, end to end proof of each message's origin and recipient.

4. Key management
- provide secure
distribution and management of keys needed to provide secure communication.

5. Availability
- Provide delivery
assurance for each messages segment so that messages or messages segments
cannot be lost undetectably.

]]> 2017-04-11 08:09:32 UTC https://padlet.com/maizatul82/requirement/wish/165829936 AL-IKHSAN GROUP https://padlet.com/maizatul82/requirement/wish/165834954 Use Enhance Verification SSL:
Every site that exchanges financial or personal information requires using the Secured Socket Layer, enabled by SSL certificates. They provide a secured, encrypted connection between your visitors and your site.

Use PCI and Vulnerability Scanning Services:
PCI and vulnerability scanning are often bundled together, but have different objectives. PCI Scanning, such as Comodo’s HackerGuardian, are designed to make it easy for you to meet your quarterly PCI compliance reporting requirements. Failure to do so can result in large fines and even suspension of your ability to take credit cards.

Use multi-factor authentication:
Despite enhancements to SSL and advancements in network security, hackers have demonstrated the ability to intercept user ids and passwords.

Trust seals matter:
Trust seals are images issued by a 3^rd party that attest that your site has met a set of standards and criteria that make you trustworthy. Studies show that consumers are more likely to purchase from sites where they see such seals. They will increase your conversion rates and repeat customers.

Use a Managed DNS:
When you communicate on the internet, domain names that are easily understood by humans must be translated into related IP addresses that identify each computer on the internet. The translation is done by a Domain Name Server (DNS), usually provided by the Internet Service Provider or setup by the company itself.]]> 2017-04-11 08:52:37 UTC https://padlet.com/maizatul82/requirement/wish/165834954 bella Ammara https://padlet.com/maizatul82/requirement/wish/165837406 1. Integrity: prevention against unauthorized data modification

2. Nonrepudiation: prevention against any one party from reneging on an agreement after the fact

3. Authenticity: authentication of data source

4. Confidentiality: protection against unauthorized data disclosure

5. Privacy: provision of data control and disclosure

6. Availability: prevention against data delays or removal
Server protection

– Access control and authentication

* Digital signature from user

* Username and password

* Access control list
Firewalls

· Packet filter firewall: checks IP address of incoming packet and rejects anything that does not match the list of trusted addresses (prone to IP spoofing)

· Application level proxy server: examines the application used for each individual IP packet (e.g., HTTP, FTP) to verify its authenticity.

· Stateful packet inspection: examines all parts of the IP packet to determine whether or not to accept or reject the requested communication.

]]> 2017-04-11 09:18:12 UTC https://padlet.com/maizatul82/requirement/wish/165837406 Class Rap Group https://padlet.com/maizatul82/requirement/wish/166005269 Integrity - ability to ensure that information being displayed on a website or transmitted/received over the internet has not been altered in any way by an unauthorized party.

Non-repudiation - ability to ensure that e-commerce participants do not deny (repudiation) online actions.

Authenticity - ability to identify the identity of a person or entity with whom you are dealing on the internet.

Confidentially - ability to ensure that messages and data are available only to those authorized to view them.

Privacy - ability to control use of information a customer provides about himself to merchant.

Availability - ability to ensure that an e-commerce site continues to function as intended.]]> 2017-04-12 02:04:38 UTC https://padlet.com/maizatul82/requirement/wish/166005269