Hacker risk in e-commerce systems with specific reference to the disclosure of confidential information
| dc.contributor.author | Lamprecht, C. | |
| dc.date.accessioned | 2012-02-01T13:32:18Z | |
| dc.date.available | 2012-02-01T13:32:18Z | |
| dc.date.issued | 2004-12 | |
| dc.description | The original publication is available at http://www.sajim.co.za/ | en_ZA |
| dc.description.abstract | In a Web-centric environment, transactions between various parties, such as the e-commerce company, its client and a bank, are done electronically. Merging the business processes of this extended enterprise with the supporting technological processes adds to the complexity of the Web-centric environment. One of the intrinsic building blocks and security requirements in such an environment is the confidentiality between parties who exchange value electronically across open, and sometimes insecure, channels via the Internet. Consumers need to feel secure and have assurance regarding the safety of private information that is captured and managed in the other party’s database, which has become the heart of a company in this information age (Fogie and Peikari 2002). Moscove, Simkin and Bagranoff (2003:195) emphasize the fact that such private and sensitive information normally held in a database, must be protected from those not authorized to have access to it. Databases and the information stored in them sometimes represent the most important asset and are irreplaceable. A credit bureau’s database files, for example, are its business. Databases are also critical components for corporate Web systems (Moscove, Simkin and Bagranoff 2003:195). Although companies seem to have security policies and procedures in place to control access to database information, unauthorized intrusion still occurs. The objective of this study was to identify the main hacker risks and to address them by identifying the components of control that should be in place to prevent such risks, as well as unauthorized access to confidential information. Microsoft’s SQL Server was employed as an example of a database system that is used to manage confidential information. Hacker-specific risks pertaining to the MS SQL Server were therefore identified. | en_ZA |
| dc.description.version | Publishers' Version | en_ZA |
| dc.format.extent | 10 p. | |
| dc.identifier.citation | Lamprecht, C. 2004. Hacker risk in e-commerce systems with specific reference to the disclosure of confidential information. South African Journal of Information Management, 6(4),:1:10.doi:10.4102/sajim.v6i4.356. | en_ZA |
| dc.identifier.issn | 1560-683X (online) | |
| dc.identifier.issn | 2078-1865 (print) | |
| dc.identifier.other | doi:10.4102/sajim.v6i4.356 | |
| dc.identifier.uri | http://hdl.handle.net/10019.1/19465 | |
| dc.language.iso | en_ZA | en_ZA |
| dc.publisher | AOSIS OpenJournals | en_ZA |
| dc.rights.holder | Copyright is retained by the author(s) | en_ZA |
| dc.subject | Electronic commerce -- Security measures | en_ZA |
| dc.subject | Computer security | en_ZA |
| dc.subject | Confidential communications | en_ZA |
| dc.subject | Disclosure of information | en_ZA |
| dc.title | Hacker risk in e-commerce systems with specific reference to the disclosure of confidential information | en_ZA |
| dc.type | Article | en_ZA |