Web Commerce Security Design and Development

Summary

This chapter covered fundamental building blocks of Web commerce security. The important role and basics of cryptography, including digital signatures, in securing transactions over the Internet were explained in detail. The importance of access control mechanisms, including discretionary and mandatory access control, was explored in the context of e-commerce applications. Building on these foundations, the chapter covered hardening of Web commerce systems, including service level, host level, and network security, with the purpose of illustrating the tools and methods available to increase the security posture of Web commerce systems.

In Chapter 6, the Web commerce system components available for authentication, authorization, and non-repudiation will be presented as well as the fundamentals of defense in depth and security policies and models.