scholarly journals WEB PHISING ATTACK ANALYSIS ON E-COMMERCE SERVICE USING NETWORK FORENSIC PROCESS METHOD

2019 ◽  
Vol 2 (2) ◽  
pp. 59-69
Author(s):  
Aseh Ginanjar ◽  
Nur Widiyasono ◽  
Rohmat Gunawan
Keyword(s):  
Credit Card ◽  
The Internet ◽  
Network Data ◽  
Sensitive Information ◽  
Ip Address ◽  
The World ◽  
Network Forensic ◽  
Number Of Customers ◽  
Protocol Analyzer ◽  
Process Method

The internet provides around the world facilities to reach customers without market restrictions, including e-commerce. As a result, the number of customers who depend on the Internet for purchases has increased dramatically. Potential cybercrime attacks such as phishing are criminal activities that attempt to obtain illegally sensitive information. The sensitive information can be in the form of a username, password, and credit card details. Then it is necessary to analyze the non-volatile data obtained in real and sourced from a Facebook forum. Data acquisition techniques use forensic live network data processing using Network Protocol Analyzer tools, namely Wireshark. The results of the investigation and analysis are summarized in the form of the table. The success of the investigation can be found in the source of the attack in the form of IP Address, URL phishing, DNS protocol, IMAP, username, password, FTP, SMTP, and HTTP. The analysis provides recommendations on how to avoid web phishing attacks.

A REVIEW ON OVERVIEW OF ETHICAL HACKING

2021 ◽  
Vol 6 (4) ◽  
Author(s):  
Vaishnavi Bhagwat Savant ◽  
Rupali D. Kasar ◽  
Priti B. Savant
Keyword(s):  
Cloud Computing ◽  
Credit Card ◽  
Dark Side ◽  
The Internet ◽  
The People ◽  
The World ◽  
Private Citizens ◽  
E Mail

The explosive growth of the Internet has brought many good things such as E-commercebanking, E-mail, cloud computing, but there is also a dark side such as Hacking, Backdoors, Trapdoors etc. Hacking is the first big problem faced by Governments, companies, and private citizens around the world. Hacking means reading email’s of someone, stealing passwords, stealing credit card numbers etc. An ethical hacker is one who can help the people who are suffered by this hackings. This paper describes about Ethical hackers, it’s types and phases of hacking

A Simple and Secure Credit Card-Based Payment System

2010 ◽  
pp. 834-842
Author(s):  
Chi Po Cheong
Keyword(s):  
Private Information ◽  
Credit Card ◽  
Financial Institution ◽  
Payment System ◽  
The Internet ◽  
Sensitive Information ◽  
Payment Systems ◽  
Credit Card Number ◽  
Card Number ◽  
Card Payment

Credit card is the most popular payment method used in Internet shopping. The idea of credit card payment is to buy first and pay later. The cardholder can pay at the end of the statement cycle or they can pay interest on the outstanding balance. Therefore, there are many credit card-based electronic payment systems (EPSs) that have been developed to facilitate the purchase of goods and services over the Internet such as CyberCash (VeriSign), iKP (Bellare, Garary, Hauser, et al, 1995), SET (Visa and MasterCard, 1997), CCT (Li & Zhange, 2004), and so forth. Usually a credit card-based EPS involves five parties: cardholder, merchant, acquirer bank, issuer bank, and financial institution. Internet is an open system and the communication path between each other is insecure. All communications are potentially open for an eavesdropper to read and modify as they pass between the communicating endpoints. Therefore, the payment information transmitted between the cardholder and the merchant through Internet is dangerous without a secure path. SSL (Zeus Technology, 2000) is a good example to secure the communication channel. Besides the issue of insecure communication, there are a number of factors that each participant must consider. For example, merchant concerns about whether the credit card or the cardholder is genuine. There is no way to know the consumer is a genuine cardholder. As a result, the merchant is incurring the increase in losses due to cardholder disputes and frauds. On the other hand, cardholders are worried about the theft of the privacy or sensitive information such as the credit card number. They don’t want any unauthorized usage of their credit cards and any modification to the transaction amount by a third party. These security issues have deterred many potential consumers from purchasing online. Existing credit card-based EPSs solve the problems in many different ways. Some of them use cryptography mechanisms to protect private information. However, they are very complicated, expensive, and tedious (Xianhau, Yuen, Ling, & Lim, 2001). Some EPSs use the Certificate Authority (CA) model to fulfill the authentication, integrity, and nonrepudiation security schemes. However, each participant requires a digital certificate during the payment cycle. These certificates are issued by independent CAs but the implementation and maintenance cost of this model is very high. In addition, the validation steps of Certificate-based systems are very time-consuming processes. It requires access to an online certificate server during the payment process. Moreover, the certificate revocation list is a major disadvantage of the PKI-based certification model (The Internet Engineering Task Force). The cardholder’s certificate also includes some private information such as the cardholder’s name. The requirement of a cardholder’s certificate means software such as e-Wallet is required to be installed on the cardholder’s computer. It is the barrier for the cardholder to use Certificatebased payment systems. To solve this problem, Visa Company has developed a new payment system called Verified by Visa (VbV) (http:www/visa-asia.com/ ap/sea/merchants/productstech/vbv_implementvbv. shtml). However, sensitive information such as credit card number is still passed to the merchant. Therefore, the cardholder is not protected by the system.

Detecting Network Anomalies In ISP Network Using DNS And NetFlow

2019 ◽  
Vol 2 (3) ◽  
pp. 238-242
Author(s):  
Andreas Tedja ◽  
Charles Lim ◽  
Heru Purnomo Ipung
Keyword(s):  
Service Providers ◽  
The Internet ◽  
Domain Name System ◽  
Domain Name ◽  
Internet Service ◽  
Ip Address ◽  
Traffic Characteristics ◽  
The World ◽  
Fast Flux ◽  
Crucial Part

The Internet has become the biggest medium for people to communicate with otherpeople all around the world. However, the Internet is also home to hackers with maliciouspurposes. This poses a problem for Internet Service Providers (ISP) and its user, since it ispossible that their network is compromised and damages may be done. There are many types ofmalware that currently exist on the Internet. One of the growing type of malware is botnet.Botnet can infect a system and make it a zombie machine capable of doing distributed attacksunder the command of the botmaster. In order to make detection of botnet more difficult,botmasters often deploy fast flux. Fast flux will shuffle IP address of the domain of themalicious server, making tracking and detection much more difficult. However, there are stillnumerous ways to detect fast flux, one of them is by analysing DNS data. Domain Name System(DNS) is a crucial part of the Internet. DNS works by translating IP address to its associateddomain name. DNS are often being exploited by hackers to do its malicious activities. One ofthem is to deploy fast flux.Because the characteristics of fast flux is significantly different thannormal Internet traffic characteristics, it is possible to detect fast flux from normal Internettraffic from its DNS information. However, while detecting fast flux services, one must becautious since there are a few Internet services which have almost similar characteristics as fastflux service. This research manages to detect the existence of fast flux services in an ISPnetwork. The result is that fast flux mostly still has the same characteristics as found on previousresearches. However, current fast flux trend is to use cloud hosting services. The reason behindthis is that cloud hosting services tend to have better performance than typical zombie machine.Aside from this, it seems like there has been no specific measures taken by the hosting service toprevent this, making cloud hosting service the perfect medum for hosting botnet and fast fluxservices.

Leak in OpenSSL

2021 ◽  
Vol 7 (1) ◽  
pp. 1-6
Author(s):  
Jason Yapri ◽  
Rinkel Hananto
Keyword(s):  
Unethical Behavior ◽  
Credit Card ◽  
Transport Layer ◽  
The Internet ◽  
Secure Socket Layer ◽  
Collaborative Project ◽  
Low Level ◽  
Transport Layer Security ◽  
Confidential Data ◽  
The World

The term “hacker” has been spread around the world and has always been considered as a threat when we use the internet. We often hear hackers deface websites’ contents and break into system to steal private and confidential information, such as account’s username and password, credit card numbers and others. This is definitely an unethical behavior of irresponsible people who mostly aims to gain profit. However the term hacker, on the contrary actually originates from an expert computer technicians who tries to access the system to debug and fix security problems of the system. Nowadays there are dozens of websites out there and some of those websites have low level of security. Hacker can easily break through their system and steal their private confidential data but just because these websites have low level security, that doesn’t mean that it is ethical to break into someone’s system and read their data. It goes the same when someone entering other people’s house because the door was left open by the owner. As web development grows rapidly, security has become an essential part to make the website more secure and reliable. This is when a group of people decided to make a collaborative project on the implementation of SSL (Secure Socket Layer) and TLS (Transport Layer Security) that is available to be used by everyone. This project is called as OpenSSl and has been used by most of the websites in the internet today. What if this OpenSSL, which has been trusted and implemented by 2/3rd of the websites all around the world can be breached? Definitely it will attract dozens of hackers all around the world to do something unimaginably dangerous.

Introduction

Digitized ◽  
2012 ◽  
Author(s):  
Peter J. Bentley
Keyword(s):  
Search Engine ◽  
Credit Card ◽  
Modern Society ◽  
The Internet ◽  
Human History ◽  
Internet Service ◽  
Internet Browser ◽  
The World ◽  
Word Search ◽  
Worldwide Network

They obey our instructions with unlimited patience. They store the world’s knowledge and make it accessible in a split second. They are the backbone of modern society. Yet they are largely ignored. Computers. They comprise our crowning achievements to date, the pinnacle of all tools. Computer processors and software represent the most complex designs humans have ever created. The science of computers has enabled one of the most extraordinary transformations of our societies in human history. . . . You switch on your computer and launch the Internet browser. A one-word search for ‘pizza’ finds a list of pizza restaurants in your area. One click with the mouse and you are typing in your address to see if this restaurant delivers. They do! And they also allow you to order online. You choose the type of pizza you feel like, adding your favourite toppings. The restaurant even allows you to pay online, so you type in your credit card number, your address, and the time you’d like the delivery. You choose ‘as soon as possible’ and click ‘pay’. Just thirty-five minutes later there is a knock on your door. The pizza is here, smelling delicious. You tip the delivery guy and take the pizza to your table to eat. Ordering pizza is nothing unusual for many of us around the world. Although it may seem surprising, this increasingly common scenario with cheap prices, fast delivery, and access to such variety of food for millions of customers is only possible because of computers. In the situation above you might have spotted just one computer. If we take a look behind the scenes, the number of computers involved in bringing your pizza is astonishing. When you switched on your computer, you actually powered up many computers that all work together to make the display, mouse, keyboard, broadband, and main computer operate. Your computer linked itself to the Internet—which is a worldwide network of computers— with the help of computers of the phone company and Internet service provider. When you searched for ‘pizza’ the request was routed between several computers before reaching the search engine computers.

Introduction

2018 ◽  
Author(s):  
Mark Newman
Keyword(s):  
Social Networks ◽  
Community Structure ◽  
World Wide Web ◽  
World Wide ◽  
Small World ◽  
Ecological Networks ◽  
The Internet ◽  
Network Data ◽  
The World

An overview of topics discussed in the book. The introduction starts with a discussion of a range of example networks including the internet, social networks, the world wide web, and biological and ecological networks, followed by a discussion of methods for analyzing network data and properties of observed networks, such as degrees, centrality, degree distributions, the small-world effect, and community structure. The chapter ends with an outline of the rest of the book.

A Simple and Secure Credit Card-Based Payment System

2009 ◽  
pp. 1299-1306
Author(s):  
Chi Po Cheong
Keyword(s):  
Private Information ◽  
Credit Card ◽  
Financial Institution ◽  
Payment System ◽  
The Internet ◽  
Sensitive Information ◽  
Payment Systems ◽  
Credit Card Number ◽  
Card Number ◽  
Card Payment

Credit card is the most popular payment method used in Internet shopping. The idea of credit card payment is to buy first and pay later. The cardholder can pay at the end of the statement cycle or they can pay interest on the outstanding balance. Therefore, there are many credit card-based electronic payment systems (EPSs) that have been developed to facilitate the purchase of goods and services over the Internet such as CyberCash (VeriSign), iKP (Bellare, Garary, Hauser, et al, 1995), SET (Visa and MasterCard, 1997), CCT (Li & Zhange, 2004), and so forth. Usually a credit card-based EPS involves five parties: cardholder, merchant, acquirer bank, issuer bank, and financial institution. Internet is an open system and the communication path between each other is insecure. All communications are potentially open for an eavesdropper to read and modify as they pass between the communicating endpoints. Therefore, the payment information transmitted between the cardholder and the merchant through Internet is dangerous without a secure path. SSL (Zeus Technology, 2000) is a good example to secure the communication channel. Besides the issue of insecure communication, there are a number of factors that each participant must consider. For example, merchant concerns about whether the credit card or the cardholder is genuine. There is no way to know the consumer is a genuine cardholder. As a result, the merchant is incurring the increase in losses due to cardholder disputes and frauds. On the other hand, cardholders are worried about the theft of the privacy or sensitive information such as the credit card number. They don’t want any unauthorized usage of their credit cards and any modification to the transaction amount by a third party. These security issues have deterred many potential consumers from purchasing online. Existing credit card-based EPSs solve the problems in many different ways. Some of them use cryptography mechanisms to protect private information. However, they are very complicated, expensive, and tedious (Xianhau, Yuen, Ling, & Lim, 2001). Some EPSs use the Certificate Authority (CA) model to fulfill the authentication, integrity, and nonrepudiation security schemes. However, each participant requires a digital certificate during the payment cycle. These certificates are issued by independent CAs but the implementation and maintenance cost of this model is very high. In addition, the validation steps of Certificate-based systems are very time-consuming processes. It requires access to an online certificate server during the payment process. Moreover, the certificate revocation list is a major disadvantage of the PKI-based certification model (The Internet Engineering Task Force). The cardholder’s certificate also includes some private information such as the cardholder’s name. The requirement of a cardholder’s certificate means software such as e-Wallet is required to be installed on the cardholder’s computer. It is the barrier for the cardholder to use Certificatebased payment systems. To solve this problem, Visa Company has developed a new payment system called Verified by Visa (VbV) (http:www/visa-asia.com/ ap/sea/merchants/productstech/vbv_implementvbv. shtml). However, sensitive information such as credit card number is still passed to the merchant. Therefore, the cardholder is not protected by the system.

A hitchhiker’s guide to microscopy and microanalysis using telecommunications, e-mail, and the Internet

1994 ◽  
Vol 52 ◽  
pp. 390-391 ◽  
Author(s):  
Nestor J. Zaluzec
Keyword(s):  
The Internet ◽  
Information Superhighway ◽  
The World ◽  
Exchange Information ◽  
On Line ◽  
Computer Based ◽  
Software And Hardware ◽  
Communication Software ◽  
Basic Ideas ◽  
E Mail

The Information SuperHighway, Email, The Internet, FTP, BBS, Modems, : all buzz words which are becoming more and more routine in our daily life. Confusing terminology? Hopefully it won't be in a few minutes, all you need is to have a handle on a few basic concepts and terms and you will be on-line with the rest of the "telecommunication experts". These terms all refer to some type or aspect of tools associated with a range of computer-based communication software and hardware. They are in fact far less complex than the instruments we use on a day to day basis as microscopist's and microanalyst's. The key is for each of us to know what each is and how to make use of the wealth of information which they can make available to us for the asking. Basically all of these items relate to mechanisms and protocols by which we as scientists can easily exchange information rapidly and efficiently to colleagues in the office down the hall, or half-way around the world using computers and various communications media. The purpose of this tutorial/paper is to outline and demonstrate the basic ideas of some of the major information systems available to all of us today. For the sake of simplicity we will break this presentation down into two distinct (but as we shall see later connected) areas: telecommunications over conventional phone lines, and telecommunications by computer networks. Live tutorial/demonstrations of both procedures will be presented in the Computer Workshop/Software Exchange during the course of the meeting.

Sex Differences in Mass Media Preferences Across Four Asian Countries

2011 ◽  
Vol 23 (4) ◽  
pp. 186-191 ◽  
Author(s):  
Malini Ratnasingam ◽  
Lee Ellis
Keyword(s):  
United States ◽  
Sex Differences ◽  
Mass Media ◽  
The United States ◽  
Female Students ◽  
The Internet ◽  
Evolutionary Explanation ◽  
Asian Countries ◽  
The World ◽  
Media Preferences

Background. Nearly all of the research on sex differences in mass media utilization has been based on samples from the United States and a few other Western countries. Aim. The present study examines sex differences in mass media utilization in four Asian countries (Japan, Malaysia, South Korea, and Singapore). Methods. College students self-reported the frequency with which they accessed the following five mass media outlets: television dramas, televised news and documentaries, music, newspapers and magazines, and the Internet. Results. Two significant sex differences were found when participants from the four countries were considered as a whole: Women watched television dramas more than did men; and in Japan, female students listened to music more than did their male counterparts. Limitations. A wider array of mass media outlets could have been explored. Conclusions. Findings were largely consistent with results from studies conducted elsewhere in the world, particularly regarding sex differences in television drama viewing. A neurohormonal evolutionary explanation is offered for the basic findings.

India Goes Digital..Smartphone is the New Shopping Destination

2018 ◽  
Vol 6 (8) ◽  
pp. 289
Author(s):  
Shankar Chaudhary
Keyword(s):  
Online Shopping ◽  
Mobile Apps ◽  
Smart Phone ◽  
Mobile Commerce ◽  
Mobile App ◽  
Smart Phones ◽  
The Internet ◽  
The World ◽  
Shopping Experience ◽  
User Friendly

Despite being in nascent stage m-commerce is gaining momentum in India. The explosive growth of smart-phone users has made India much loved business destination for whole world. Indian internet user is becoming the second largest in the world next to China surpassing US, which throws open plenty of e-commerce opportunities, not only for Indian players, offshore players as well. Mobile commerce is likely to overtake e-commerce in the next few years, spurred by the continued uptrend in online shopping and increasing use of mobile apps.The optimism comes from the fact that people accessing the Internet through their mobiles had jumped 33 per cent in 2014 to 173 million and is expected to grow 21 per cent year-on-year till 2019 to touch 457 million. e-Commerce brands are eyeing on the mobile app segment by developing user-friendly and secure mobile apps offering a risk-free and easy shopping experience to its users. Budget 4G smart phones coupled with affordable plans, can very well drive 4G growth in India.

Sign in / Sign up

Export Citation Format

Share Document