An Integrated Vulnerability Assessment of Electronic Commerce Websites

Abstract

This paper examines the security issues on electronic commerce websites in Ghana using technical and nontechnical procedures. The study assessed e-commerce websites for the security tools employed to protect user data and other related privacy issues on the websites. It also analyzed e-commerce websites for encryption security tools that protect customer data and test e-commerce websites for the presence of security vulnerabilities that could threaten the security of the sites and their users using w3af. The study used a combination of three methods; web content analysis, information security audit and testing of the websites using w3af, a vulnerability assessment tool. Web application attack and audit framework (w3af) was used to test and identify possible vulnerabilities on the e-commerce websites that could be used by malicious users to steal customer data for fraudulent intent. The research focused to reveal the security vulnerabilities present on e-commerce websites that could affect the trust of clients, the satisfaction of clients, and patronage of e-commerce services by customers. The study found credit card number disclosures, full path disclosures vulnerabilities, cross-site request forgery vulnerabilities and social security number exposures of clients on the e-commerce websites. These security weaknesses in these e-commerce websites have been highlighted as findings in the study that would inform policy direction on electronic data collection, protection and use in the e-commerce industry in Ghana. The findings will also inform industry players in the e-commerce sector on the need to strengthen security on their websites and caution customers to be security conscious on all e-commerce websites. The major significance of the study is the fact that majority of the electronic commerce websites have a lot of vulnerabilities making them unsecure for customers to trust their private data into their care. This study as such informs the customer society and the electronic commerce industry of these security weaknesses and the urgent need to get them fixed. Some solutions have been suggested in the paper to assist in fixing these security vulnerabilities. These solutions have provided the best results. A diligent application of these methods in addressing the vulnerabilities would provide a more secure and less vulnerable e-commerce websites for users. The precautions suggested could assist protect customers and reduce cyber threats during online shopping.

The functional safety assessment of cyber-physical system operation process described by Markov chain

“…The analysis of the logs of the information and communication system of the Situation Center revealed the following categorized vulnerabilities 38 – 40 : : (a) CVE-2019-9511, (b) CVE-2015-5206, (c) CVE-2019-9512, (d) CVE-2020-9481, (e) CVE-2020-17509; : (a) CVE-2008-0127, (b) CVE-2007-6593, (c) CVE-2021-36301, (d) CVE-2019-18805, (e) CVE-2017–6745; : (a) CVE-2021-45253, (b) CVE-2022-22055, (c) CVE-2021-45814, (e) CVE-2021-44599, (e) CVE-2020-0060. …”

Economic Security of Ukraine’s Railway Transport in the Context of National Security

“…Nowadays, following Ukraine's national security policy and the chosen course for European and Euro-Atlantic integration, the construction of a national system of resilience and capacity planning has become relevant [11][12][13][14]. In the context of ensuring the economic security of railway transport, sustainability is understood by the authors of this article as the ability of enterprises, institutions and organizations of railway transport, as well as the capacity of their employees, to quickly adapt to changes in the safety sector and operate with the aim to minimize vulnerabilities [15,16] caused by the external and internal environment. Similarly, capacity planning is understood as the definition of the main directions of Ukraine's transport policy implementation, strategic goals of railway transport development and the expected results of their achievement, taking into account the real and potential threats to the economic security of railway transport.…”

Machine Learning for Healthcare-IoT Security: A Review and Risk Mitigation

“…Nowadays, browsers are a crucial component of almost every computer. Nevertheless, browsers are not immune from vulnerabilities [116], [117]. As a result of these vulnerabilities, attackers often gain access to a victim's computer, steal PII, corrupt files, or use the hacked machine to attack others, potentially becoming a part of a botnet [118].…”