作者: Greg Megaw , Stephen V. Flowerday
DOI: 10.1109/ISSA.2010.5588333
关键词: Phishing 、 E-commerce 、 The Internet 、 Network security 、 Electronic mail 、 Computer science 、 Authentication 、 Computer security 、 Vulnerability (computing) 、 Email authentication 、 Internet privacy
摘要: E-Commerce has been plagued with problems since its inception and this paper examines one of these problems: The lack user trust in E-commerce created by the risk phishing. Phishing grown exponentially together expansion Internet. This growth advancement technology not only benefitted honest Internet users, but enabled criminals to increase their effectiveness which caused considerable damage budding area commerce. Moreover, it negatively impacted on both online business, breaking down relationship between them. In an attempt explore problem, following was considered; firstly, e-commerce's vulnerability phishing attacks. By referring Common Criteria Security Model, various critical security areas within e-commerce are identified, that, weakness. Secondly, methods techniques used such as emails, websites addresses, distributed attacks redirected well data that phishers seek obtain, is examined. Furthermore, way reduce turn users explored. Here importance Trust Uncertainty Reduction Theory plus fine balance control Finally, presents Critical Success Factors aid prevention control, being: User Authentication, Website Email Data Cryptography, Communication, Active Risk Mitigation.