A Decision Making Model for Securely Conducting Electronic Commerce

By Korzyk, Alexander D.

Description
Technical Reference Publication

Excerpt
Abstract: The small to medium size enterprise faces many problems not faced by larger enterprises. One of these important problems in today?s Internet World is how to establish a presence on the Internet and securely conduct electronic commerce. Large enterprises have much greater resources and usually include the development and execution of their Internet strategy in the Information Services Division. Unfortunately, most small to medium sized enterprises have a very small information technology staff if they have an information technology staff at all. Faced with the dilemma of hiring a new information technology Internet specialist, training the current Information Analyst, or contracting out the Internet business requirement, management must make a hard decision. Perhaps the most critical criteria in determining which alternative to choose are maximizing security and minimizing financial losses due to computer security incidents. The average loss of a computer security incident for all sizes of business.

Table of Contents
Table of Contents 22nd National Information Systems Security Conference Conference Committee 1999 National Computer Systems Security Award Papers Find and Fix Y2K Embedded Equipment Risks Dick Lefkon, New York University Are Organizations Ready for the Electronic Renaissance in Communications? Email Monitoring & Privacy Issues Jim Kates, Phillip Whited, IntraSec Corporation Making Netscape Compatible with Fortezza? ? Lessons Learned George Ryan, Pulse Engineering, Inc. Active Networks and Security Vijay Varadharajan, Rajan Shankaran, Michael Hitchens, University of W. Sydney Security of High-Performance Messaging Layers on Programmable Network Interface Architectures Srigurunath Chakravarthi, Mississippi State University Attitude Adjustment: Trojans and Malware on the Internet: an Update Sarah Gordon, David Chess, IBM Thomas J. Watson Research Center The Network Vulnerability Tool (NVT) ? A System Vulnerability Visualization Architecture. Ronda Henning, Ph.D., Kevin L. Fox, Ph.D., Harris Corporation Implementation of Mulitple Access Control Policies within a CORBASEC Framework Ramaswamy Chandramouli, National Institute for Standards and Technology A Trace-Based Model of the Chinese Wall Security Policy Ann E. Kelley Sobel, Miami University (Ohio) Jim Alves-Foss, University of Idaho Digital Watermark Mobile Agents Jian Zhao, Chenghui Luo, Fraunhofer Center for Research in Computer Graphics, Inc. Immunity-Based Intrusion Detection System: A General Framework Dipankar Dasgupta, University of Memphis From AntiVirus to AntiMalware Software and Beyond: Another Approach to the Protection of Customers from Dysfunctional System Behaviour Dr. Klaus Brunnstein, University of Hamburg, Germany P3I - Protection Profile Process Improvement Jeffrey R. Williams, Karen M. Ferraiolo, Arca Systems, Inc. Protection Profiles for Certificate Issuing & Management Systems A. Arsenault, National Security Agency R. Housley, Spyrus Common Criteria Evaulations in the US: What a Developer Should Know Kimberly S. Caplan, Douglas Stuart, CISSP, Computer Sciences Corporation