From Amazon
Online security investigator and research scientist Anup Ghosh takes a realistic look at the state of security for electronic commerce. He is neither a Pollyanna believing that all is fine, nor a doomsayer predicting catastrophe for transactions lacking virtual armour. In fact, he feels that some levels of security are excessive. But he emphasises that any security system is only as strong as its weakest point. If you're going to trust your money to online transactions, you need to know where your weaknesses lie and how to correct them.
To that end, Ghosh discusses real-life security failures, how they occurred and how recurrences can be prevented. He then takes a systematic look at the areas of risk. One chapter deals with potential problems in active Web content, such as Java applets, ActiveX controls and push technology. He examines data protocols to secure transactions with the warning that the data can be vulnerable before and after the secure transmission. The weaknesses of server hardware and software come under scrutiny as well. Ghosh calls for greater attention to security as software and looks at what advances are likely to be coming down the road. --Elizabeth Lewis
Book Description
Commerce over the Internet will be the wave of the future, provided businesses can allay consumer fears about security. Until now, most security efforts have focused on protecting the actual transaction while neglecting the other components necessary for secure commerce; yet if any other component is vulnerable, the transaction remains at risk. This book addresses the four essential elements of safe electronic commerce: the data transaction, the servers, the clients, and the host networks. It covers in detail the steps required to insure that each is truly secure.