BTEC NAT Unit 15 - Organisational Systems Security ORGANISATIONAL SYSTEMS SECURITY Unit 15 Lecture 4 E-Commerce Threats

BTEC NAT Unit 15 - Organisational Systems Security Learning Objectives E-Commerce Threats Website Defacement Website Defacement Denial of Service Attacks Denial of Service Attacks

BTEC NAT Unit 15 - Organisational Systems Security Website Defacement Website Defacement Nuisance attack by hackers called ‘crackers’ Nuisance attack by hackers called ‘crackers’ Look for script or version vulnerabilities in web servers and website code Look for script or version vulnerabilities in web servers and website code Editing of HTML or script to display own items on the site Editing of HTML or script to display own items on the site Explicit images, personal tags, political or religious statements or childish statements Explicit images, personal tags, political or religious statements or childish statements Phishing – Write in meta-refresh tags to forward victims to their own ‘spoof’ site Phishing – Write in meta-refresh tags to forward victims to their own ‘spoof’ site Time and income loss during recovery Time and income loss during recovery Loss of customer trust Loss of customer trust

BTEC NAT Unit 15 - Organisational Systems Security Denial Of Service Attacks Denial Of Service Attacks Worms devised that will leave Trojans to send traffic from multiple devices Worms devised that will leave Trojans to send traffic from multiple devices Flooding of firewalls causing entry point problems Flooding of firewalls causing entry point problems Denial of income for E-commerce systems Denial of income for E-commerce systems Problems to overcome in using third party suppliers eg eBay, Amazon Problems to overcome in using third party suppliers eg eBay, Amazon Threats to commercial security of an organisation and personal security of customers Threats to commercial security of an organisation and personal security of customers

BTEC NAT Unit 15 - Organisational Systems Security Activity 4 Activity 4 E-Commerce Threats 1. What examples of e-commerce attacks can you find in the media? 2. Try to find out how the organisations involved combated these attacks