E-Commerce Protocol Resistant to Cyber Attacks
Özet
Rapid technological advancements and the growth of e-commerce have made cybersecurity a crucial priority due to threats like data theft, phishing, and service disruptions. E-commerce security relies on five key principles: confidentiality, integrity, availability, non-repudiation, and suitability. To address security risks, various protocols are utilized, primarily SSL, SET, and 3-D Secure. SSL (Transport Layer Security) provides end-to-end protection at the session layer without requiring extra software, but it exhibits limitations such as vulnerability to man-in-the-middle attacks and allowing merchants full access to payment data. Developed jointly by Visa and MasterCard, the SET protocol uses public key infrastructure, symmetric encryption, and dual signatures to keep credit card numbers hidden from merchants, though its adoption is hindered by high complexity, operational costs, and a lack of product quality guarantees. Developed by Visa, the 3-D Security protocol acts as an XML-based security layer over SSL, using digital certificates across the buyer, issuer, and interoperability domains to authenticate cardholders and reduce fraudulent transactions. Modern 3-D Security 2.0 enhances user experience through invisible background authentication and verification codes, effectively shifting fraud liability to cardholders. Future developments focus on overcoming SET protocol limitations through trusted third parties and transaction logging to ensure data privacy, regulatory compliance, and transaction trust.
Referanslar
Akleylek, S., Yıldırım, H. M., & Tok, Z. Y. (2011). Kriptoloji ve uygulama alanları: açık anahtar altyapısı ve kayıtlı elektronik posta. Akademik Bilişim, 713-718.
AliShirvani, N., & Mortazavi, B. (2016). Guaranteeing of trust and security in e-commerce by means of improved set protocol. Bulletin De La Société Royale Des Sciences De Liège, 1136-1147.
Amicarelli, V., Tricase, C., Spada, A., & Bux, C. (2021). Households’ food waste behavior at local scale: a cluster analysis after the COVID-19 lockdown. Sustainability, 13(6), 3283.
Asare, S. D., Gopolang, B., & Mogotlhwane, O. (2012). Challenges facing SMEs in the adoption of ICT in B2B and B2C E‐commerce: A comparative case study of Botswana and Ghana. International Journal of Commerce and Management, 29(4), 272-285.
Atakan, M. (2021). Siber Güvenlik ve Covid 19 Salginin Uzaktan Denetim Üzerinde Etkileri. Denetişim, (22), 27-39.
Aydin, S., & Derer, E. (2015). E-Ticarette Güven Unsurunun Müşterilerin Satin Alma Davranişlarina Olan Etkisi: Süleyman Demirel Üniversitesi Öğrencileri Üzerine Bir Araştirma. Süleyman Demirel Üniversitesi Sosyal Bilimler Enstitüsü Dergisi, (21), 127-150.
Benz, M., & Chatterjee, D. (2020). Calculated risk? A cybersecurity evaluation tool for SMEs. Business Horizons, 63(4), 531-540.
Boholm, M. (2021). Twenty-five years of cyber threats in the news: a study of Swedish newspaper coverage (1995–2019). Journal of Cybersecurity, 7(1), 1-23.
Boping, Z. & Shiyu, S. (2009). An Improved SET Protocol. In F. Yu, J. Shu & G. Yue (Eds), Proceedings of the 2009 International Symposium on Information Processing (ISIP’09), (pp. 267-272).
Calzada, J.; Tselekounis, M. (2018). Net Neutrality in a hyperlinked Internet economy. International Journal of Industrial Organization, 59, 190-221.
Çetintaş, E. (2018). Sosyal medya ve e-ticaret kullanıcılarının gizlilik ve güven algılarının değerlendirilmesi: Türkiye-ABD karşılaştırması (Unpublished master's thesis). Yalova University, Yalova.
Çinar, I., & Bilge, H. Ş. (2016). Web Madenciliği Yöntemleri ile Web Loglarının İstatistiksel Analizi ve Saldırı Tespiti. Bilişim Teknolojileri Dergisi, 9(2), 125.
Dupont, B., & Lusthaus, J. (2021). Countering distrust in illicit online networks: The dispute resolution strategies of cybercriminals. Social Science Computer Review. doi: 0894439321994623.
Etemadi, N., Van Gelder, P., & Strozzi, F. (2021). An ism modeling of barriers for blockchain/distributed ledger technology adoption in supply chains towards cybersecurity. Sustainability, 13(9), 4672.
Girsang, M.J.; Candiwan; Hendayani, R.; Ganesan, Y. (2020). Can information security, privacy and satisfaction influence the e-commerce consumer trust? In 2020 8th International Conference on Information and Communication Technology (ICoICT) doi: 10.1109/ICoICT49345.2020.9166247.
Greenstein, S. (2015). How the internet became commercial. Princeton: Princeton University Press.
Grewal, D., Gauri, D. K., Roggeveen, A. L., & Sethuraman, R. (2021). Strategizing retailing in the new technology era. Journal of Retailing, 97(1), 6-12.
Güllü, K., & Didem, A. (2018). Tüketicilerin Seyahat Acentaları Web Tabanlı Uygulamalarını Etik Yönden Değerlendirmeleri. OPUS Uluslararası Toplum Araştırmaları Dergisi, 9(16), 1254-1284.
Huertas-Valdivia, I., Ferrari, A. M., Settembre-Blundo, D., & García-Muiña, F. E. (2020). Social life-cycle assessment: A review by bibliometric analysis. Sustainability, 12(15), 6211.
IETF. The TLS Protocol Version 1.0[EB/OL]. Retrieved from http://www.ietf.org/rfc/rfc2246.txt, 1999-01-05
Keenan, J. M. (2020). COVID, resilience, and the built environment. Environment Systems and Decisions, 40(2), 216-221.
Knight, P. (2000). ILOVEYOU: Viruses, paranoia, and the environment of risk. The Sociological Review, 48(2_suppl), 17-30.
Koç, C. K. (1999). Next Generation E-Commerce Security. Information Security Laboratory December, 2. Retrieved from https://www.just.edu.jo/~tawalbeh/nyit/csci860/notes/nextg.pdf
Marangoz, M. (2018). Tüketici mahremiyetinin korunmasi: sorumlular ve yöntemler üzerine nitel bir araştirma. Journal of Academic Researches and Studies, 10(19), 474-488.
Miceli, A., Hagen, B., Riccardi, M. P., Sotti, F., & Settembre-Blundo, D. (2021). Thriving, not just surviving in changing times: How sustainability, agility and digitalization intertwine with organizational resilience. Sustainability, 13(4), 2052.
Nada M.A.A. (2008). E-Commerce Security. IJCSNS International Journal of Computer Science and Network Security, 8(5), 340-344.
Ratnasingham, P. (1998). Trust in web‐based electronic commerce security. Information Management & computer security, 6(4), 162-166.
Ren, X., Wei, L., Zhang, J. & Ma, X. (2011). The Improvement of SET Protocol based on Security Mobile Payment. Journal of Convergence Information Technology, 6(7), 22-28.
Saqib, M. N., Kiani, J., Shahzad, B., Anjum, A., & Ahmad, N. (2019). Anonymous and formally verified dual signature based online e-voting protocol. Cluster Computing, 22(1), 1703-1716
Sanyal, S., Tiwari, A. & Sanyal, S. (2010). A multifactor secure authentication system for wireless payment. In R. Chbeir, Y. Badr, A. Abraham, & A.-E. Hassanien (Eds), Emergent web intelligence: Advanced information retrieval (pp. 341-369). London: Springer.
Stallings, B. (2002). Globalization and liberalization: The impact on developing countries. In States, markets, and just growth: Development in the 21st century, ed. Atul Kohli, Chung-In Moon, and George Sorensen. Tokyo: United Nations Press
Treiblmaier, H., Mirkovski, K., Lowry, P. B., & Zacharia, Z. G. (2020). The physical internet as a new supply chain paradigm: a systematic literature review and a comprehensive framework. The International Journal of Logistics Management, 31, 239-287.
Turnaoğlu, M. (2015). İletişim teknolojisindeki gelişmelerin ticari ilişkilere etkileri ve yeni Türk Ticaret Kanununa yansıması (Unpublished master's thesis). İstanbul Ticaret University, İstanbul.
Visa 3-D Secure 2.0 (2022). What is Visa's 3-D Secure 2.0 and how does it work? Retrieved from https://usa.visa.com/visa-everywhere/security/future-of-digital-payment-security.html
Vysotska, V., Bublyk, M., Vysotsky, A., Berko, A., Chyrun, L., & Doroshkevych, K. (2020, September). Methods and tools for web resources processing in e-commercial content systems. In 2020 IEEE 15th International Conference on Computer Sciences and Information Technologies (CSIT) (Vol. 1, pp. 114-118). IEEE.
Zhiguang, Q. I. N., Xucheng, L. U. O., & Rong, G. A. O. (2004). A survey of E-commerce Security. Journal of Electronic Science and Technology, 2(3), 173-176.
