10+E-Commerce+Security+Technology+电商安....ppt

E commercesecuritytechnology电商安全技术 李贻电子商务英语 Case B WhatdidBibliofind Comspecializein Hard to find rare andcollectiblebooks珍稀书籍 典藏书籍Otherfeatures Searchforbooksbythetitle标题 pricerange价格区间 firstedition创刊号 Allowawishlist心愿单triggeranemailwhenaspecificbookbecameavailable TheHackingofB Whataretheconsequencesofthehacking 1 Homepagereplacedbydefaced破坏的versions2 Websiteshutdownforseveraldays3 Crackersgainedaccessformorethan4months4 Illegalaccesstocustomers information include Names addresses creditcardnumbers Crackern 黑客 hackvt 非法入侵电脑系统Plaintextfiles纯文本文档 transactionserver交易服务器 Remediestothehacking补救措施 Wtakeafterthehacking Andwhatistheresult 1 calledinlawenforcementofficialstoinvestigate2 sentemailnotesto98 000customers3 investigationturnedouttobeinvain徒然的 4 customerswereveryupset wascloseddown businessfailed Maintainadequatesecurity保持足够的安全性 Internetsecurityfundamentals互联网安全基本守则 Thepurposeofsecurityfundamentals Secureyourpersonalconfidentialinformation保密信息frompredators protectyoufromidentitytheft身份盗窃 Minimizedamagecausedbyviruses病毒andhijacking劫持 远程控制 MaketheInternetsaferforothers Howtosecureyourinformation 如何加密信息 Changepasswordsfrequently usealphanumericcodes包含数字与文字的密码Resistusingyourname birthdays familiarobjectsandlocations makeitdifficulttoguess Ifsuspectanaccounthasbeencompromised 收到威胁 ChangepasswordsimmediatelyReportthebreach 违法行为 Howtodiscloseinformation 如何公开信息 Donotreleasepersonalinformationsuchas addresses creditcardnumbers phonenumber orbankaccountnumber passport护照orsocialsecuritynumber 社保医保号码 Useencryptedform 加密形式 tosendsensitivedata Bewareofphishing小心网络钓鱼 Phishingscams 钓鱼式欺诈 thatclaimtobeyourbank creditcardcompany educationalinstitution cellphoneprovider 随着phishingsite 钓鱼网站 日益猖獗 phishinge mail 诈骗邮件 日益泛滥 anti phishing 反网络钓鱼 软件也应运而生 比如微软就在IE7 0中加入了phishingfilter 网络钓鱼过滤器 但要想防止被骗 还需要我们平时多加小心 BasicrequirementsforE bizsecurity 1 privacy私密性2 integrity忠实性3 authentication互认性 互相认证身份 4 non repudiation存证性 信息收讫确认 Firewall防火墙 Afirewallisadeviceorsetofdevicesdesignedtopermitordenynetworktransmissionsbaseduponasetofrules 允许 拒绝 加密 解密 代理服务器Permit deny encrypt decrypt Proxy Networkswithdifferenttrustlevels Internet azonewithnotrustPerimeternetwork AzonewithanintermediatetrustleveliscalledDMZ Demilitarizedzone 隔离区 非军事区Internalnetwork azonewithhightrust TwoRulesetsforfirewall两套法则 Default deny默认拒绝 standardsecuritypracticeDefault allow默认允许 manybusinesses practice Networklayerfirewall packetfilters网络层防火墙 数据包过滤器 Administratordefinerules定制规则 orapplydefaultrules应用默认规则Ifapacketmatchesthepacketfilter ssetofrules thepacketfilterwilldrop silentlydiscard thepacket orrejectit discardit andsend errorresponses tothesource Filterby thepacket ssourceanddestinationaddress itsprotocol and forTCP传输控制协议andUDP用户数据报traffic theportnumber通道数 Applicationlayerfirewall software应用层防火墙 软件 Intercept拦截allpacketstravelingtoorfromanapplication应用软件Restrict限制orprevent预防outrightthespreadofnetworkedcomputerworms蠕虫病毒andtrojans木马addextralatency等待时间totheforwardingofpacketstotheirdestination Proxyfirewall softwareorhardware代理服务器防火墙 软件或硬件 代理服务 Proxy 设备 可能是一台专属的硬件 或只是普通电脑上的一套软件 也能像应用程序一样回应输入数据包 例如连接要求 同时封锁其他的数据包 达到类似于防火墙的效果 代理会使从外部网络窜改一个内