电子商务.pptVIP

* * Step 1: Organizational Reconnaissance Step 2: Social Engineering, Targeted Malware Step 3: Establish Covert Backdoor Step 4: Establish Command Control Infrastructure Step 5: Complete Objectives Ex-filitrate Intellectual Property, Trade Secrets Control critical systems Step 6: Maintain Persistence * * * * /us/forconsumers/mcafee_certified_sites.jsp * * McAfee Confidential—Internal Use Only McAfee Confidential—Internal Use Only McAfee Confidential—Internal Use Only SALES KICKOFF 2012 SALES KICKOFF 2012 SALES KICKOFF 2012 电子商务交易安全威胁分析和对策 * * * 直接影响到 公司和个人的收益 互联网安全 威胁在演变 安全威胁直接影响到机构和个人的经济收益 据估算，每年电子商务因客户缺乏信任而导致取消交易的损失高达$20亿美金 恶意代码数量增长 Botnet演进趋势 APT攻击趋势 Reported Institution Data Breached Dec 2010 McDonald’s 1.3 million consumers data records including name, add, phone, birth date and gender Dec 2010 Honda/Acura 3rd party marketing firm SilverPop- 4.9 million accounts July 2010 UCSF Medical Center Employee used colleagues’ SSNs, PII to fill out hundreds of surveys and redeem A vouchers July 2010 Buena Vista University PII for applicants, students, staff, and donors going back to 1987 stolen from BVU database June 2010 Univ. of Maine Hackers stole PII/clinical data for 3,500 students June 2010 Digital River, Inc. Hackers (and possibly insiders) copy 200,000 personal records Mar 2010 TSA Terminated developer placed malware in terrorism suspect DB Feb 2010 Ceridian Attack yielded SSNs and bank account data for 27,000 employees of 1,900 companies from payroll processor Jan 2010 Iowa Racing Gaming Comm. Hacker gained access to database containing PII of more than 80,000 employees Dec 2009 Rock You SQL injection resulted in breach of 32 million user passwords Nov 2009 T-Mobile Employee sold millions of customer records to rival carriers Aug 2009 Heartland 130 Million+ credit/debit card records Source: Privacy Rights Clearinghouse 安全威胁直接影响到机构和个人的经济收益 安全威胁直接影响到机构和个人的经济收益 Company Breach Sony /gaming/news/2011/04/sony-looking-into-compensating-psn-users-fbi-ge