Course Abstracts

Email: info@sysoft.com Phone: (800) 467-9736 or (732) 549-9002 Fax: (732) 549-7060

Sysoft 7250	e-Commerce / e-Business Security
Offered as	This course focuses on security issues related to e-Commerce and e-Business.
Certification	- SIP Level 2
Topics	- Dangers in a Changing Paradigm of Business - Banking on the Internet - Investing on the Internet - Doing Business on the Internet - Threats to E-Commerce - Vandalism and Sabotage on the Internet - Breach of Privacy or Confidentiality - Theft and Fraud on the Internet - Violations of Data Integrity - Denial of Service - E-Commerce Security: A System-Wide Problem - Client Security - Secure Transport - Web Server Security - Operating System Security - The Future of E-Commerce Security - Deadly Content: The Client-Side - Vulnerabilities - Executing Malware - ActiveX (In)security - ActiveX Containers - ActiveX Scripting - Authenticode: Establishing Trust for ActiveX - Deadly Controls - Java Security - The Java Sandbox - Holes in the Sandbox - Signing Applets - Desktop Integration Problems - The Cybersnot Problem - The UMD Security Hole - The MIT Bug - The Other Dirty Dozen - JavaScript - Plug-Ins and Graphic Files - Attachments - Push Technology and Active Channels - Securing the Data Transaction - Secure Channels - Using SSL to Establish Secure Sessions - The Role of Certification Authorities - Web Spoofing - How SSL Works - Securing Web Sessions Using S-HTTP - Stored-Account Payment Systems - First Virtual - CyberCash - Secure Electronic Transaction - Stored-Value Payment Systems - Pros and Cons - How E-Cash Works - Securing E-Cash - Representing Electronic Cash - E-Cash - CyberCoin - Smart Cards - Applications of Smart Cards - Storing Value on Smart Cards - CAFE - Mondex - Visa Cash - Securing the Commerce Server - The Web Server - The Databases - The Server-Side Scripts - Web Server Security - Installing the Web Server Securely - File Access Permissions - Escalating Client Privilege - Accept These Options at Your Own Risk - Controlling Access to Sensitive Documents - Dangerous CGI Scripts - Mitigating the Dangers of CGI Scripts - Database Vulnerabilities - Designing More Secure Software - Buffer Overflows - Analyzing the Security of Software - Cracks in the Foundation - Securing the Operating System - Minding the Operating System - Name Your Poison: Unix or Windows NT - Firewall Insecurity - Locking Down the Firewall - Data-Driven Attacks - The Network Server Vulnerabilities - Caveat Emptor - Burying the Deadly Defaults - Flaws in the Web Server - Flaws in CGI Scripts - Networking Software Insecurity - Denial of Service - Weak Authentication - Operating System Holes - Defending the Server - Securing the Future of E-Commerce - Certifying Components for Security - What Is a Software Component? - The Status Quo - Penetrate-and-Patch - Certifying Identity - Certifying Software - To Be Stamped - Java Components - ActiveX Components - The Rest of the Bunch - Certifying Technologies - How Safe Is It?