An application of security threats on electronic business (A descriptive study of Internet users doing Electronic Business)

Abstract

With the move to an e-business mode, the number of users involved in business operations has increased and these users need access to the organizational information. Hence the organizational information technology aspects have essentially become much more frequently and easily crossed. Thus the modern e-business environment makes the effectiveness of the perimeter security approach highly questionable. newline newlineWith the fast growth of the Internet and the world wide web security has become a major concern of many organizations, enterprises and users. Criminal attacks and intrusions into computer and information systems are spreading quickly and they can come from anywhere or everywhere. The design of the security model and development of the methodology rests on the belief that modern business and technological systems are complex dynamic systems. Security will then be achieved by focusing on a specified set of security requirements and by securing the business logic and individual information flows of an e-process. newline newlineA descriptive study on e-business security with the new security model and a methodology for its implementation is presented in the form of An Application of Security Threats on Electronic Business which identifies and describes the sequence of the phases that should be performed. Each phase is defined in terms of the level of the organizational hierarchy, professionals, tasks, outcomes, and phase specifics. The methodology is tested on a real life case study on a company. A company and its information system are analyzed and the process served as the basis for a test implementation of the suggested methodology. An evaluation of the methodology and opinions on its feasibility were provided by information security professionals from industry as well as institutions.