Exam 10: Electronic Commerce Security

Active content elements are programs that run on the server.

Briefly describe the requirements for secure electronic commerce.

A(n) _____ is an attachment to an e-mail message or program embedded in a Web page that verifies that the sender or Web site is who it claims to be.

One disadvantage of private-key systems is that encryption and decryption are significantly slower than public-key systems.

A _____ is a written statement describing which assets to protect and why they are being protected, who is responsible for that protection, and which behaviors are acceptable and which are not.

JavaScript and VBScript are _____, which provide commands that are executed on the client.

_____ refers to preventing unauthorized data modification.

A _____ is an element of a program that allows users to run the program without going through the normal authentication procedure for access to the program.

Any message traveling on the Internet is subject to secrecy, integrity, and necessity threats.

_____ is the electronic defacing of an existing Web site's page.

Threats that are unlikely to occur can be ignored when the cost to protect against the threat exceeds the value of the protected asset.

Firewalls that filter traffic based on the application requested are.

Software applications called _____ provide the means to record information that passes through a computer or router that is handling Internet traffic.

One significant threat to electronic commerce is theft of sensitive or personal information.

A(n) _____ is a Trojan horse that secretly takes over another computer for the purpose of launching attacks on other computers.

Message packets on the Internet travel a planned path from a source node to a destination node.

Networks outside a firewall are referred to as trusted networks.

_____ is the protection of computer assets from unauthorized access, use, alteration, or destruction.

_____ refers to protecting against unauthorized data disclosure and ensuring the authenticity of the data source.

A _____ is an area of memory set aside to hold data read from a file or database.