Experts in information technology tell us, for example: Website Design , network securities, e-commerce and other information carried by the network will involve network security issues. Generally speaking, the current security solutions of e-commerce mainly involve anti-virus, firewall, vulnerability scanning, intrusion detection, encryption and authentication. Of course, encryption and authentication technologies are closely related to e-commerce transactions.
1、 Encryption
As a basic technology, data encryption is the cornerstone of all data communication security. The data encryption process is implemented by various encryption algorithms, which provide great security protection at a very small cost. Data encryption technology can be divided into symmetric encryption and asymmetric encryption. At present, the widely used symmetric encryption method is 3DES, and RSA algorithm is the most famous algorithm in the field of asymmetric encryption. Symmetric cryptographic algorithm is used for information encryption; Asymmetric cryptographic algorithms are used for key distribution, digital signature, integrity and identity authentication. Digital signature uses encryption technology to prove the identity of information sender and receiver, the integrity and non repudiation of documents.
2、 CA certification
A digital certificate is an identification for entities (consumers, merchants/enterprises, banks, etc.) to exchange information and conduct business activities online. In each link of electronic transaction, each party needs to verify the validity of the other party's digital certificate, so as to solve the problem of mutual trust. At present, the main certificate standard is X 509。 In electronic transactions, the issuance of digital certificates is completed by the authoritative and impartial third party. Authentication Center (CA) is a service agency that undertakes the authentication service of online secure electronic transactions, issues digital certificates and confirms the identity of users. At present, the internationally accepted electronic payment security protocols include SSL and SET security protocols. SET security protocol provides transaction protocol, information confidentiality, data integrity and digital signature rules for electronic transactions based on credit cards. PKI is a set of basic security platform technologies and specifications for e-commerce by using public key encryption technology. PKI implements unified centralized management of data encryption, digital signature, non repudiation, data integrity, and key and authentication required for identity authentication, supports e-commerce participants to establish and maintain equal trust relationships in the network environment, and ensures the security of online transactions. The CA authentication system based on PKI is compatible with BtoB and BtoC modes, and supports online shopping, online banking, online transactions and other functions. Many regions and industries in China have also established their own CA centers. For example, China's financial certification centers include SFT system and NON-SET system.
3、 Firewall
A firewall is a combination of software or hardware devices between two networks with different levels of trust (such as the internal network of an enterprise and the Internet). It controls the communication between the two networks. By enforcing a unified security policy, it prevents illegal access to and access to important information resources, so as to achieve the purpose of protecting system security. Firewall products are the most dazzling in the current network security product line, and also the first line of defense of the network. At present, there are three kinds of firewalls: packet filtering firewalls, application level gateways, and status monitors. Because firewall technology is relatively mature, firewall products are often the first field for Chinese manufacturers to enter the network security field.
4、 Vulnerability scanning and intrusion detection system
Network and system vulnerabilities are often the entry points for intruders to attack enterprise e-commerce systems. Vulnerability scanning is to conduct security related detection on computer systems or other network devices to find out security risks and vulnerabilities that can be exploited by hackers. Intrusion detection system is an active network security protection measure. It actively collects information from the system interior and various network resources to analyze possible network intrusion or attack. Generally speaking, intrusion detection system should also make emergency response to intrusion. Intrusion detection is considered as the second security gate behind the firewall, which can monitor the network without affecting the network performance, thus providing real-time protection against internal attacks, external attacks and misoperations. The combination of intrusion detection and vulnerability scanning technology is the main means to prevent hacker attacks.
