Web Commerce Security Design and Development

Contents

Foreword by John Donahoe

Foreword by Scott Thompson

Introduction

Part I Overview of Commerce

Chapter 1 Internet Era: E-Commerce

Evolution of Commerce

Hard vs. Digital Goods

Payment

Money

Financial Networks

ACH

Card Processing

Mobile Payment and Commerce

Distributed Computing: Adding E to Commerce

Client/Server

Grid Computing

Cloud Computing

Shared Resources

Dynamic Resource Allocation

Physical Abstraction

Utility Model

Self Service

SLA-Driven Management

Automation

Self-Healing

Service Orientation

Multi-Tenancy

Cloud Security

Architecture Review

Centralized Authentication

Single Sign-On and Delegation

Role-Based Access Control

Credential Store

Secure Communication and Storage

Isolated Management

Regulatory Compliance

Distributed Trust

Freshness

Trust

Secure Isolation

Authorization

Threats

Operational Aspects

Governance

Summary

Notes

Chapter 2 Mobile Commerce

Consumer Electronics Devices

Mobile Phone and M-Commerce

Landscape

M- vs. E-commerce

Mobile Hardware

Device Manufacturer

Operating System

Stack

Application Model

State of Mobile

Mobile Technologies: Mosquito on Steroids

Carrier Networks

Stacks

Java Micro Edition

Android

BlackBerry

iPhone

Symbian

Other Stacks

Summary

Notes

Chapter 3 Important “Ilities” in Web Commerce Security

Confidentiality, Integrity, and Availability

Confidentiality

Integrity

Availability

Extensibility

Black Box Extensibility

White Box Extensibility (Open Box)

White Box Extensibility (Glass Box)

Gray Box Extensibility

Fault Tolerability

High Availability ...