cyber security challenges

cyber security

measures taken to protect a computer system against an unauthorized access or attack

constantly evolving

1. web spoofing

2. cyber squatting

3. privacy invasion

4. online privacy

5. email spamming

6. copyright

7. fraud

cyber challenges of e-commerce

web spoofing

electronic deception, occurs when attacker sets up a fake website which is almost the same as the original website in order to lure consumers to give their credit card number or other personal info

cyber squatting

unauthorized registration and use of Internet domain names that are identical or similar to trademarks, service marks, company names, or personal names

privacy invasion

occurs when personal details belonging to consumers are exposed to unauthorized party

online privacy

can be defined as unauthorized copyright of electronic intellectual property such as e-books, music, or videos

email spamming

aka unsolicited commercial email involves using email to send or broadcast unwanted advertisement or correspondence over the internet

copyright

protect intellectual property in its various forms and cannot be used freely

fraud on the internet

hot issue for both cyber and click end mortar merchants

swindlers are active mainly in area of stocks

small investors are lured by promise of false profits by stocks promoters

point of sales system

common to get hacked in hotels

have a direct access to credit card data and personal info through payment processors gateways

personal data theft of WIFI systems

one of the core offerings of the establishment, but also highly insecure and not powered by stringent security measures

ransomware attacks

once hackers breach a hotel’s tech they then hold the entire infrastructure hostage and demand a ransom to release it

spear phishing attacks

usually conducted through scam emails

encryption algorithm

PKI key infrastructure systems which are based on asymmetric cryptography are highly secure as they’re coupled w secure socket layer

smartcards

can be used to store data about bearer of the card

digital watermarking

technical goal is to find ways cryptographically tagging electronic content

cybersecurity management

area of info technology that organizations and businesses use to protect and secure sensitive information from cybercriminals or any unwanted guests

1. planning and preparing

2. defect and report

3. asses and decide

4. respond

5. post incident activity

five phases of cybersec management

1. planning and preparing

organization is prepared for a cybersec incident when one arises

2. defect and report

continuous monitoring of info sources, detection of cybersec events, and collection and recording of info associated w the event

3. assess and decide

assessing cybersec events and deciding whether or not an actual cybersec incident has occurred

4. respond

containing, mitigating, and recovering from a cybersecurity incident

5. post incident activity

learning from incident and making changes that improve the organization’s security and processes

best practices against cybersec

1. operating a continuous training program in cybersec

2. use cybersec measures

3. security audits should take place regularly

4. encryption is vital for sale enviro

5. building a culture of security awareness