Zalora E-Commerce Case Study

All passwords should be promptly changed if they are suspected of being disclosed, or are known to have

USER DOMAIN: sharing passwords. Not protecting your computer properly or sharing access with other individuals will allow threats from a user end.

shown in Table 2. It indicates that all the default alphabet password which is "jackson" can be

You can prevent all users from using or reuse same old passwords under Linux. The pam_unix module parameter remember can be used to configure the number of previous passwords that cannot be reused.

For example, if a user exceeds a certain number of failed login attempts the system will either lock the user out of the system or prevent any future attempts for a specified period of time. Although an account lockout policy is designed to take time away from the attacker, so that the brute force attack will fail, this is only true if the attack is performed on an online database. For example, if the user account’s database is copied to a flash drive, and thus taken offline, the attacker could then perform brute force attacks on the copied database from their own home, bypassing your security policies all together. [explain how a hacker could accomplish this copy to a flashdrive] As a result, once the attacker discovers the password they could then impersonate (or masquerade) as an authorized user, thereby gaining access to systems with certain

If user name or password is incorrect the system will show a message “User name or password is incorrect” .

Password expiration:- Trout password Ding document will be used to fight the password life. When operating the password has expired package SQL Server, it reminded to change old passwords that are divided into customer hears, recording and password.

Strong Password Assignment. The password must be a minimum of ten characters in length and must contain alpha, numeric, and special characters. Default passwords should be immediately changed when assigned. Users must never reveal their passwords to anyone. Passwords should not be constructed from obvious personal data, i.e. social security number, telephone numbers, relative’s names, pet’s name, etc.

on the same network using the same IP address, so the user cannot access the

I add debug output information in login function at PHP file in order to what will happen with following countermeasures.

Denial of Service (DoS) attack is a very common cyber menace that renders websites and other online means inaccessible to intended users. There are various types of DoS threats and nearly all directly target the core server structure. Others abuse weaknesses in application and communication proprieties. DoS is also used as a cover-up for other wicked actions, and to take down security applications like web firewalls. A prosperous DoS attack is very obvious and impacts the entire online user base.

Increasing security threat: Zara were working from a decentralised IT system based on floppy disks, providing little opportunity to access highly valuable data on a networked database. The majority of security breeches originate with careless or vindictive employees (Austin and Darby, 2003). For Zara, there is limited opportunity for an employee to threaten the system, the worst-case scenario is that they might delete the days sales records. With such a basic system, there is also limited opportunity for hackers to infiltrate the system as the data is transferred only once a day to headquarters.

E-commerce is transactions conducted via electronic means such as the internet, email and SMS. It is considered to be one of the most important aspects of the internet to appear. As a result, people are able to exchange goods and services immediately regardless of their geographic location and time. More and more businesses conduct transactions on line, with some trading purely on-line thus reducing overheads and administrative costs.

Many organizations industriously look for the opportunity to gain the competitive advantages in their industries. One of the opportunities that frequently used by the organization is the implementation of e-commerce. Thus, the e-commerce and the online sale transaction become popular in each industry. E-commerce provides many benefits, such as the saving of shopping time, the cost savings, convenience, and free from geographical constraints.

Denial-of-service is an attack aimed to refuse access for legitimate users and disrupt service availability according to www.msdn.microsoft.com. This type of security threat according to www.tech.co.uk is rapidly increasing on the Internet due to open doors on Websites. By using the Internet, companies increase the risk of denial of service attack. Denial of service can also be caused by too many connected to a server at the same making run slow or unavailable to others. People who deliberately abuse a network server are often difficult to track down.