Computer Technology Research Corp.
Advanced Security Strategies: Protecting Today's E-buisness Environment
|
English
Utvärderingsrapporten Advanced Security Strategies: Protecting Today's E-buisness Environment, är från januari -01 och är på 151 sidor engelsk text. Rapporten innehåller:
Executive Summary
- What Are the Threats?
- The Increased Vulnerability of E-commerce Sites
- Countermeasures
- The Importance of Policies and Strategies
Internal Threats
- The Extent of the Internal Threat
- Who Is Responsible?
- Addressing the Threat
- Implementing Strong Authentication Methods
- Options for Strong Authentication
- Access Control
- Commercial Access Control Products
- Internal Firewalls
- Human Resources (HR) Strategies
- Educating Employees to Deter Social Engineering Attempts
- Monitoring Employee Internet Use
- Developing and Enforcing a Strong Security Policy
External Threats
- The Growing Role of Attack Tools in Intrusions
- Reconnaissance
- Password Attacks
- After the Hacker Has Entered
- Denial-of-Service (DoS) Attacks
- Java/ActiveX Security Threats
- Viruses
- Protecting the Enterprise from Zone Transfers
- Determining If an Intrusion Has Occurred
- Using Firewalls to Repel Outside Attacks
- Security Scanners
- Using Intrusion Detection Systems (IDSs) to Monitor for and Respond to Common Attacks
- Combating Viruses
- Software Is Not Sufficient
- Managing Java and ActiveX Controls
Securing Remote Access
- Security Threats Related to Remote Workers
- Securing Home Offices
- The Security Implications of Broadband Access to the Home
- Strong Authentication Measures for Remote Users
- Security for Mobile Workers
- Virtual Private Networks (VPNs) for Remote Workers and Branch Offices
- Protecting Remote Users with VPNs
- Using VPNs to Connect Remote Offices
- Placing VPNs Relative to Firewalls
- VPNs: Difficulties Continue
Securing E-commerce
- Web Site Vandalism
- Buffer Overflow
- Exploiting Common Gateway Interface (CGI) Vulnerabilities and Other Application-layer Problems
- Securing the Web Site
- The Importance of Software Patches
- Antihacker Tools
- Using Secure Sockets Layer (SSL) to Protect Online Transactions
- SSL and Server Certificates
- Internet Protocol Security (IPSec)
- Firewalls
- Packet Filters
- Dynamic Packet Filters
- Proxy Firewalls
- What Firewalls Cannot Do
- Firewall Features and Products
Public Key Encryption
- The Market for Public Key Infrastructures (PKIs)
- How Digital Certificates Operate
- Issuing Digital Certificates to Customers and Business Partners
- New Encryption Standards
- The Importance of Directory Services
- PKI: Overall Problems and Potential Solutions
- Keeping Private Keys Private
- Digital Certificate Portability
- Digital Signature Legality
- Shared Workstations
- Certificate Revocation
- Interoperability
- Approaches to Implementing a PKI
Securing Extensible Markup Language
- Banking Initiatives and Extensible Markup Language (XML) Security
- Building Security into a Document Type Definition (DTD)
Creating a Security Strategy
- Conducting Risk Analysis
- Security Assessment Strategies
- Penetration Testing
- Insurance
- Staffing Issues
- Centralizing Security
- Security as Part of E-business Application Development
- The Importance of Security Policy and Auditing
- The Need for Security Education
- Incident Response
- After the Incident
För en mer detaljerad beskrivning se den engelska!
För pris se beställningsformulär!
Närbesläktade rapporter:
Hämta faktainsamlingsformulär/ checklista för utvärdering av affärs- och ekonomisystem utan kostnad.
Lämna din egen bedömning av någon programvara eller system och erhåll marknadsanalys och checklista utan kostnad!
Lämna din egen bedömning av en IT leverantör och erhåll marknadsanalys och checklista utan kostnad!
Länk till evalu8IT. Mer än 650 utvärderingar av programvara, hårdvara och leverantörer
Data Research DPU
för utvärdering av IT - Informationsteknologi och Data Produkter
Data Research DPU ab - Torsvikssvängen 34, SE-181 34 Lidingö, Sweden - Telefon 08-446 07 71 - Email kontakt
|