当当网安全问题探讨.docVIP

当当网安全问题探讨 周婷玉 贡莉 陈雯燕 沈晴 尹佳妮 孙喆 （ 上海商学院管理学院电子商务051 上海 201400） 摘 要 随着互联网的快速发展,伴之而来的电子商务安全问题的如何解决，已经成为目前社会急待攻破的首要网络发展目标。本文选取了一个具体网站——当当网，做为电子商务安全问题探讨的事例。文章从三个角度来观察当当网站可能存在的安全技术问题，分别从它与银行、客户和合同角度发现一些漏洞，并在此基础上提出了一些常规的技术解决方案。当当网是我国第一大卖书网，它给我们日常生活带来了很多便利。当当网提供繁多的商品、优惠的价格、快捷的搜索、灵活的付款方式、迅速的送货服务，通过不断提升各种网络功能，保持并扩大在全球中文书刊和音像网上零售业务上的领先地位。但是因为电子商务网站建设并不发达，安全隐患是我们不得不考虑的因素。 关键词 电子商务安全、银行网络、客户网络漏洞 Security of Ding-dong net and Solutions ZHOU tingyu, GONG li, CHEN wenyan, SHEN qing, YIN jiani, SUN zhe （Management College EB051, Shanghai Business School, Shanghai 201400） Abstract：The rapid development of Internet, e-commerce comes with the problem of how to solve security, has become an urgent goals. This article has selected a concrete website - - ding-dong net, does for the electronic commerce security problem discussion instance. The article observes the safety work question which from three angles ding-dong the website possibly exists, separately from it with the bank, the customer and the contract angle discovers some cracks, based on this and proposed some conventional technology solution. Ding-dong net is our country first big sellers, it gave us the daily many conveniences. Ding-dong net provides many commodities, the benefit price, the quick search, the nimble payment method, the rapid delivery service, through promotes each kind of network function unceasingly, maintains and expands in the whole world books and magazines in Chinese chord likely on-line retail business the leading position. But the electronic commerce website construction is not developed, the safe hidden danger is the factor which we can not but consider. Keywords：electronic commerce security, bank network, customer network crack 1．前言 １．１当当电子商务流程简介 电子商务流程是指消费者从其客户端上网录找产品/服务信息到售后服务与支持的全过程。如图2-11所示： 图2-11 电子商务的流程 图2-6电子商务交易程序 电子商务的应用是信息流、商流、资金流和物流的整合。其中，信息流最为重要，它对整个流程起着监控作用，而物流、资金流则是实现电子商务的保证，商流代表着货物所有权的转移，标志着交易的达成。表2-2说明四流的概念，图2-12则对四流的基本功能作了描述。 表2-2 四流的概念 信息流 信息的转移过程 可以通过计算机和网络通信设备实现 商流 商品在购、销之间进行交