Electronic Commerce Security and Risk Management: An Important Part of College Curriculum

With the rapid expansion of e-commerce,its security and risk management problems become increasingly prominent.In the current business environment,the ability to understand and apply e-commerce security and risk management has become an important criterion to measure a good person.Therefore,the importance of e-commerce security and risk management courses in college education is self-evident.This course can not only help students master the basic knowledge of e-commerce,but also enable them to understand how to deal with various risks in practical work and ensure the safe operation of e-commerce.At the same time,through the study of e-commerce security and risk management,students can better understand the operation mode and law of e-commerce,and lay a solid foundation for their future career.In general,e-commerce security and risk management occupy an important position in the curriculum of colleges and universities,and play a crucial role in cultivating e-commerce professionals with practical operation ability and innovative thinking.

An Application Expert System for Evaluating Effective Factors on Trust in B2C WebsitesTrust, Security, ANFIS, Fuzzy Logic, Rule Based Systems, Electronic Commerce

In new environments of trading, customer's trust is vital for the extended progress and development of electronic commerce. This paper proposes that in addition to known factors of electronic commerce B2C websites such a design of websites, security of websites and familiarity of website influence customers trust in online transactions. This paper presents an application of expert system on trust in electronic commerce. Based on experts’ judgment, a frame of work was proposed. The proposed model applies ANFIS and Mamdani inference fuzzy system to get the desired results and then results of two methods were compared. Two questionnaires were used in this study. The first questionnaire was developed for e-commerce experts, and the second one was designed for the customers of electronic websites. Based on AHP method, Expert Choice software was used to determine the priority of factors in the first questionnaire, and MATLAB and Excel were used for developing the fuzzy rules. Finally, the fuzzy logical kit was used to analyze the generated factors in the model. Our study findings show that trust in EC transactions is strongly mediated by perceived security.

Design of the XML Security System for Electronic Commerce Application

The invocation of World Wide Web (www) first triggered mass adoption of the Internet for public access to digital information exchanges across the globe. To get a big market on the Web, a special security infrastructure would need to be put into place transforming the wild-and-woolly Internet into a network with end-to-end protections. XML (extensible Markup Language) is widely accepted as powerful data representation standard for electronic documents, so a security mechanism for XML documents must be provided in the first place to secure electronic commerce over Internet. In this paper the authors design and implement a secure framework that provides XML signature function, XML Element-wise Encryption function, smart card based crypto API library and Public Key Infrastructure (PKI) security functions to achieve confidentiality, integrity, message authentication, and/or signer authentication services for XML documents and existing non-XML documents that are exchanged by Internet for E-commerce application.

Accountability Analysis of Electronic Commerce Protocols by Finite Automaton Model

The accountability of electronic commerce protocols is an important aspect to insures security of electronic transaction. This paper proposes to use Finite Automaton (FA) model as a new kind of framework to analyze the transaction protocols in the application of electronic commerce. Key words finite automaton - electronic commerce - nonrepudiation - information security CLC number TP 393. 08 Foundation item: Supported by the National Natural Science Foundation of China (66973034, 90104005, 60373087)Biography: Xie Xiao-yao (1952-), male, Professor, Ph. D candidate, research direction: information security.

Research on Merchant Fraud Problem in Electronic Commerce

Popularization and acceptance of an electronic commerce system mainly depends on its security and ease of use. Security of electronic commerce includes communication security, secure payment and goods delivery. Few solutions take merchant fraud problem into account despite its important role in electronic commerce. Disputes resolution is one way to solve merchant fraud but in general it is only useful for online information goods or judgement of fraudulent side. This paper focuses on how to solve merchant fraud problem. As previous electronic commerce schemes cannot solve merchant fraud problem due to its inherent weakness in structure, we put forward a new revolutionary scheme that is named ELC(electronic letter of credit) as it simulates letter of credit commonly used in imports and exports. ELC is a revolutionary progress in electronic commerce as it solves merchant fraud problem without weakening security of other aspects. An electronic commerce system prototype, called SEMALL, is under implementation. SEMALL consists of an electronic payment system named BEARCAT and a Web Mall named VE. BEARCAT is developed on the basis of ELC as an instance of ELC scheme. The process of a BEARCAT transaction is described and analyzed detailedly in the paper. ELC scheme can greatly push development of electronic commerce.

Comparative Research on Payment Protocols SSL and SET in Electronic Commerce

The security of electronic payment is one discusses the secure mechanism and transaction process of the key problems in electronic commerce. This paper of the two electronic payment protocols SSL and SET, and presents the differences between them on security, function and practicality. SSL takes an active role in current electronic payment. With high security and perfect specifications, however, SET isn＇t widely used at present because of its complexity. But it will change in the future.

电子商务支付发展趋势——3D-Secure技术

从协议模型、工作机制及优势等方面对3D-Secure技术进行了分析和探讨。

Electronic Payment Scheme to Prevent the Treachery

Treachery is one of the restrictions to the development of electronic commerce. To prevent the treachery from the participants in electronic commerce, in this paper a secure electronic payment scheme is proposed and its security is analyzed. This scheme can prevent the treachery only with the aid of an un-trusted third party. It is very simple and it also improves the security and provides the non-repudiation, accountability, fairness and privacy.

3-D Secure协议的安全分析

电子商务是当今社会发展的方向。本文着重对当前最新的电子商务协议3-D Secure进行安全分析,通过与其他安全协议的分析、对比得出当前3-D Secure协议的优势和面临的安全问题,并对安全问题提出加强方案。

基于大数据技术的电子商务支付安全性检测

常规的支付安全检测方法中,主要以对抗的形式限制交易时间,无法满足电子商务支付场景的需求。因此,设计了基于大数据技术的电子商务支付安全性检测方法。首先,确定电子商务安全支付的威胁点,并对其安全支付结构进行改进;其次,利用大数据技术构建了电子商务支付安全性检测模型,找出威胁支付安全的风险节点,并对其进行检测;最后,进行对比实验。实验结果表明,与其他方法相比,该检测方法的检测效果更佳,能够应用于实际生活中。

电子商务的安全问题

在简要地介绍了电子商务的基本知识之后 ,对电子商务的安全因素、安全威胁、安全体系结构和核心的安全技术进行了系统的分析和讨论。最后 。

电子商务的安全体系结构及技术研究

随着电子商务的飞速发展，交易安全成为制约其发展的关键。从电子商务系统对安全性的需求出发，探讨了电子商务安全技术体系结构，揭示了各安全技术间的层次关系，从全局上把握了电子商务安全机制，并重点介绍了其中的核心技术。

SET协议中问题的分析及解决方案

文中对 SET协议中的“k out of n”问题进行了全面的分析 ,并提出了完整的解决方案 .在对 SET付费业务流程中的两个关键性问题用 NDL逻辑进行验证后 ,给出了它们的 Prolog程序流程 .全文着重于在 SET协议中实现“防抵赖”和“可追踪”两种安全机制 ,并在此基础上实现用 Prolog语言程序模拟验证过程 .

电子商务安全体系的探讨

随着Internet的发展,电子商务已经逐渐成为人们进行商务活动的新模式。建立一个安全便捷的电子商务环境,对信息提供足够的保护十分重要。针对这个问题,介绍了电子商务面临的安全威胁,论证了电子商务体系的控制要求,探讨了电子商务安全体系的法律法规和安全技术问题。

Internet移动代理技术中的安全性研究

主要针对Internet的移动代理技术中的安全问题进行研究 ,介绍了移动代理技术的概念及目前主要的应用范畴 ,对该技术中的安全问题作了系统的分析 .另外 ,对现有的移动代理系统的安全性能作了全面的比较 。

一个安全、原子的电子商务协议及其形式化验证

电子商务的普及与接受主要取决于下述属性的解决 :安全、原子、隐私与匿名 .形式化描述和分析是描述电子商务协议并验证它们的属性的有效方法 .面向物理商品交易的电子商务协议需要具备 3个属性 :安全、原子和隐私 .介绍了一个安全、可靠的电子商务协议 BEARCAT及其形式化描述 ,并在有入侵者的情况下 ,通过用 BAN类型的逻辑证明所期望的属性的方式对协议的强度和正确性作了形式化分析 .

电子商务中两种安全支付协议SSL和SET的研究与比较

电子商务安全问题的核心和关键是电子交易的安全性,目前电子交易中经常使用如下两种安全在线支付协议:安全套接层SSL协议和安全电子交易SET协议,文章详细分析这两种安全支付协议的体系结构,所能担任的安全服务以及实现机制,然后在安全功能、加密机制、系统负载等方面进行了比较。文章最后认为,SET协议是目前安全性较高的电子交易协议,但是由于而系统庞大而复杂,银行、商家均需要改造系统才能实现互操作,因此,SET协议的普遍应用还将有一个过程。

安全支付网关技术研究与系统实现

安全支付网关是银行与internet之间的安全枢纽 ,是电子商务系统中最重要的组成部分 ,它涉及密码学、信息系统安全和风险管理等学科。在简要介绍电子商务系统安全体系结构的基础上 ,研究了安全支付网关中的安全电子交易 (SET)协议和共钥基础设施PKI等关键技术 ,以及数字签名、数字信封和数字双签名等相关的基础技术 ,并在此基础上完成了“WT0 37安全支付网关系统”

电子商务安全的探讨

介绍电子商务的发展规模以及可能会遇到的安全问题,分析电子商务安全的基本技术加密算法。根据对称加密算法和非对称加密算法的安全特点进行组合,从而提出电子商务交易的一般安全控制结构图,针对各个环节的优缺点,提出有效解决安全问题的方案,同时重点突出了各种相关新技术的特点;电子商务交易的发展,互联网的普及,网络上交易及其信息的安全性已经对人们的经济活动及日常生活产生了重要的影响,为此,提出的电子商务安全方案最大限度地降低了人们的风险;进一步探讨和展望电子商务的前景:随着电子商务的发展,电子交易的手段也更加多样化,安全问题也会变得重要和突出;同时,电子商务又是一个复杂的系统工程,它的安全还要依赖许多社会问题的解决。