According to Kaspersky Lab e survey, e-Commerce as an overall industry segment pays significantly less attention to guarding sensitive payment information and protecting their systems from IT security breaches.
This seems highly counter-intuitive from what might be expected of a company that exists solely to process online transactions, but the responses regarding almost all aspects of e-Commerce security were notably lower than the average responses of traditional businesses.
The survey asked each business about the top concerns of the IT department…
1. The highest overall response was “Protecting highly-sensitive data (including financial information) from targeted attacks,” an answer given by an average of 34% of businesses. The responses from the e-Commerce segment were lower than this average, at 28%.
2. The second-highest overall priority of the IT department was “Preventing IT security breaches,” given by 29% of all businesses. Again, the responses from the e-Commerce section were lower than average, at 22%.
3. Another high-ranking concern for the IT department was “ensuring continuity of service for business-critical systems,” cited as a top concern by 23% of businesses overall. E-Commerce again came in lower than average at 19%, which is shocking since their entire revenue stream could be cut off by a DDoS attack.
Over the years, the methods used by ecommerce sites to process and store credit card information has become much more sophisticated than the early days of online shopping. This progress has helped online shopping overcome one of its greatest obstacles, consumer trust. As evidenced by the amount of money spent online each year, people feel much more secure in shopping online than they ever have. Unfortunately for businesses, the methods used by cyber criminals trying to steal their customer’s information have made it easier than ever for them to compromise a web application.
Cyber criminals use bot nets to launch attacks against unsuspecting websites that are vulnerable to attack in order to steal credit card information.
Some of the most common exploits used in financial data theft include:
- SQL Injection
- Cross-Site Scripting
- Path Traversal
- Session Hijacking
- Malware (Drive-by downloads)
Unfortunately, most sites that are vulnerable to these types of attacks don’t know it until it is too late.
An application breach is another cause of concern while purchasing from an e-commerce site. Smartphones and mobile apps are a great resources for interaction, browsing, entertainment, but they are a large gateway of cyberattack. Hackers attack through phishing techniques and malware installation among other things.