The application of 3rd party certification programme in Malaysia: VeriSign

VeriSign helps those companies and consumers to engage in trusted communications and commerce and its leading Secure Sockets Layer (SSL) Certificate Authority enabling secure e-commerce, communications, and interactions for Websites, intranets and extranets.

VeriSign is the most trusted mark on the internet because its secures more than 1 million web servers worldwide. The world's 40 largest banks and over 93% of Fortune 500 companies choose VeriSign SSL certificates such as ebay, PayPal, Pioneer and PC World.

The successful key of e-commerce is gain the trust from online customers in order to increase theirs sales and profit so that the e-commerce business should increase customer confidence at the transaction time. Normally, the online shoppers will cincerns about the credit card fraud,k identity theft, sharing personal information and spyware because the fraund and identity theft have created an awesome effect on e-commerce. For examples, there only has 65% of online consumers shop at sites they know and trust but there also haven 65% of onlie shoppers have discarded online shopping because they did not trust on the transaction.

Secure Sockets Layer (SSL) protects the websites and makes it easy for the website visitors to trust and gain the confidence. An SSL Certificate enables encryption of sensitive information during the online transactions and contains unique, authenticated information about the certificate owner. Besides this, the Certificate Authority verifies the identity of the certificate owner when it is issued.

How SSL works?
(1) An SSL Certificate establishes a private communication channel and enabling encryption of the data during transmission. When encryption proceed to the data immediately will create an envelope for message privacy. Besides this, each SSL Certificate consists of a public key and a private key. The public key is used to encrypt information while the private key is used to decode it. When a web browser points to a secured domain, a SSL will grip authenticates the server ( website) and the client (web browser).

(2) Every VeriSign SSL Certificate is created for a particular server in a specific domain for a verified busienss entity. When the SSL grip occurs, the browser requires authentication information from the server by clicking the closed padlock in the browser window or SSL trust marks. In high-security browsers, the authenticated organization name is prominently displayed and the address bar turns green when an Extended Validation SSL Certificate is detected. If the information does not match or the certificate has expired, the browser displays an error message or warning.

(3) The SSL Certificate is issued by a trusted source known as the Certificate Authority (CA). VeriSign verifies the existence of the business, the ownership of domain name and authority to apply for the certificate. Besides this, VeriSign Extended Validation SSL Certificates meet the highest standard in the Internet security industry for website authentication. The high-security web browser's address bar turns green and show the name of organization that owns the SSL Certificate.

By using the VeriSign, its can helps to improve customers trust and increase confidence of consumers because visitors will feel more secure to make their transaction and also to confirm the identity of the website owner.

For more information, please refer to http://www.verisign.com/

Above information is adopted from http://www.verisign.com/

(2

HOW TO SAFEGUARD OUR PERSONAL AND FINANCIAL DATA??????

Personal and financial data are important for an individual. When personal and financial data have been stolen, these data might be abused by the data theft due with illegal transactions. Therefore, we must be very careful in protecting these data and aware of the possibility to become the next victim. The following are some tips that i would like to share with you all in helping you guys to safeguard his personal and financial data:

• Use a credit card with a small limit for online purchases or online shopping. It is because the likelihood that a dishonest sales clerk to use your credit card information. If the card you use for these purchases has a low credit limit, at least thieves won't be able to bulk credit purchase at a single time.
  


• Review your monthly statements. Try to keep your receipts and thoroughly check your account statements as soon as they arrive. So next time when you are going to shopping, don’t you forget to put your receipts in your wallet. By reviewing your monthly statements not only will alert you to possible fraudulent charges, you may also find legitimate charges for services that are either redundant or no longer necessary.

• Don't use the same password everywhere. It is believed that almost people are using the same password everywhere. The email address and password combination could get the same thieves into every account you hold if you routinely use the same email address and password at all locations.



• Avoid saving credit card info, etc on shopping sites. Most of the websites today, such as Amazon, eBay, Orbitz, give their buyers the option to save their credit card information so that they don’t need to retype in all the information each time they want to buy something. That’s great for them, easy money and more sales, but their buyers’ credit card numbers and bank account numbers may be hacked and download by someone. It is just taking an extra minute to type your information all over again, but it is better to not save your information on any shopping site.

• Keep your personal and sensitive data off your computer. Try your best to keep bank account numbers, passwords, etc off your computer. If you want to keep it in electronic format for easy access, that’s fine, simply buy a flash drive or pendrive and store all the sensitive files there. Keep it in a safe place and if you need to refer to the documents, then just plug in your drive.
  


• Choose your PIN wisely. While you want to select something you will remember, you don’t want it to be something that a clever thief could figure out just by learning your birth date or your child's name. A combination of uppercase and lowercase letters, numbers, and symbols will offer you more security.



• Protect your computer's security. Use as many tools as you can (anti-virus software, spyware, firewalls, and passwords) to guard your computer information from being hacked by hacker.



• Always think before providing information when solicited. If you ever sign up an email that required any personal information, make sure that you go to the website yourself manually and provide only necessary information about yourself. A web site exists does not mean it is legitimate! If you’ve never heard of the site before, just type it into Google once and see if anything like “XXX IS A SCAM” pops up!



• Keep your e-mail private, use encryption. Many people perceived that email is not a secure medium. It is said so because email can be easily accessed and read by unintended third parties. Presently, there exist technologies that allow you to encrypt your messages before you send in order to protect your privacy.

• Turn your computer off or on standby when you’re not using it. This is kind of tip, if your computer is not on, then what can a hacker, virus, or anything else possibly does? Nothing! So make sure you shut down or put your computer into sleep mode when you are not there.



• Don't trust threats. Your bank will never contact you via email with any threat of legal action or security breach. They also won’t offer you earn money via email. If there is some threat for action in an email message, assume it is bunk. Otherwise call the business that supposedly sent it and get customer service on the line. If you are still not convinced the email isn’t real. The operator will provide you information about your account and will be happy to make you comfortable with your account status.
  


• Lock your computer at home and at the office. When you are out for lunch from your office, it is believed that most of the computers are just on without a password-protected screen saver, it might be easier for a co-worker to get into your computer and look through your data. Therefore, it is better to lock your compute or put password on your screen saver.



• 
  
  

• Don’t use the same usernames. It also wise to use different usernames when possible. It is an advice to pick a unique username for your bank, eBay, your credit card company’s site and other website that has personal financial data about yourself.

Failing to protect your data is just as bad as leaving your door unlocked, your windows wide open, and a sign on the mat, saying, "Burglars, come on in."

No need to make the thieves' jobs any easier. Though they're not foolproof, these simple tips will help ensure that your personal and financial data is a whole lot safer.

---------->prepared by: Lyon :)

Phishing

The word of "phising" initially emerged in 1990s. The early hackers often use 'ph" to replace "f" to produce new words in the hacker's community, since they usually hack by phones.

Phishing is a new word produced from ‘fishing’, it refers to the act that the attacker allure users to visit a faked Web site by sending them faked e-mails (or instant messages), and stealthily get victim’s personal information such as user name, password, and national security ID, etc. This information then can be used for future target advertisements or even identity theft attacks (e.g., transfer money from victims’ bank account).

In general, phishing attacks are performed with the following four steps:

1. Phishes set up a counterfeited Web site which looks exactly like the legitimate Web site, including setting up the web server, applying the DNS server name, and creating the web pages similar to the destination Web site, etc.


2. Send large amount of spoofed e-mails to target users in the name of those legitimate companies and organizations, trying to convince the potential victims to visit their Web sites.


3. Receivers receive the e-mail, open it, click the spoofed hyperlink in the e-mail, and input the required information.


4. Phishers steal the personal information and perform their fraud such as transferring money from the victims’ account.

Although the attacker has the method to phishing the user, user also has the several (technical or non technical) ways to prevent it:

1. Educate users to understand how phishing attacks work and be alert when phishing-alike e-mails are received;


2. Use legal methods to punish phishing attackers;


3. Use technical methods to stop phishing attackers. In this paper, we only focus on the third one. Technically, if we can cut off one or several of the steps that needed by a phishing attack, we then successfully prevent that attack.

In what follows, we briefly review these approaches.

Detect and block the phishing Web sites in time:

• If we can detect the phishing Web sites in time, we can block the sites and prevent phishing attacks.

Enhance the security of the web sites:

• The business Web sites such as the Web sites of banks can take new methods to guarantee the security of users’ personal information. There have one method to enhance this security is to use hardware devices. For example, the Barclays bank provides a hand-held card reader to the users. Before shopping in the net, users need to insert their credit card into the card reader, and input their (personal identification number) PIN code, then the card reader will produce a onetime security password, users can perform transactions only after the right password is input.


• Another method is to use the biometrics characteristic (e.g. voice, fingerprint, iris, etc.) for user authentication. For example, Paypal had tried to replace the single password verification by voice recognition to enhance the security of the Web site.

Block the phishing e-mails by various spam filters:

• Phishers generally use e-mails as ‘bait’ to allure potential victims. SMTP (Simple Mail Transfer Protocol) is the protocol to deliver e-mails in the Internet. Information that related to sender, such as the name and email address of the sender, route of the message, etc, can be counterfeited in SMTP. Thus, the attackers can send out large amounts of spoofed e-mails which are seemed from legitimate organizations. Therefore, if anti-spam systems can determine whether an e-mail is sent by the announced sender (Am I Whom I Say I Am?), the phishing attacks will be decreased dramatically.

Install online anti-phishing software in user’s computers:

• Despite all the above efforts, it is still possible for the users to visit the spoofed Web sites. As a last defense, users can install anti-phishing tools in their computers. The antiphishing tools in use today can be divided into two categories: blacklist or whitelist based and rule-based.

• The threat of online security: How safe is our data?

Viruses, hacker attacks and other cyber threats are now a part of daily life. Malware spreading throughout the Internet, hackers stealing confidential data and mailboxes flooded with spam are the price we pay for computing convenience. Any unprotected computer or network is vulnerable. Real vulnerable indeed.

For instance, home users can lose valuable personal data with one click to the wrong website. Children trading games also exchange viruses unknowingly. You receive an email requesting an update to your payment details, and a hacker gains access to your bank account. A backdoor is installed on your machine, and your PC becomes a zombie, spewing out spam.

On top of that, it's not just home users who suffer. For businesses of all sizes, the risks are manifold. Crucial data distorted by viruses, financial data misappropriated by cyber criminals, and mountains of spam reducing ROI on human and technological resources.

Some of the popular threats these days are crimewares, viruses, hackers, spam, spyware, and the list continues to grow larger. To start with, crimeware is malicious software used to initiate a crime that is typically Internet-based. During the past two years, crimeware attacks have increased at a far greater rate than the normal virus. International gangs of virus writers, hackers and spammers are joining forces to steal information and collect huge profits illegally. For example, a bank login ID and password may be collected and sent back to an attacker. The attacker typically will use this information in order to collect illegal profits.

The term “virus” on the other hand is often loosely used in reference to any type of malicious program, or it is used to describe any negative event that a malicious program causes to a host system. In the simplest terms, a virus is defined as program code that replicates from one host file to another.

“Hacking” a computer which is another threat is the act of exploiting vulnerable operating system functions, applications, and peripherals to gain unsolicited access to a computer or network. For example, a phisher who is also called a hacker may send an e-mail using the façade of a major bank, credit card or E-money service like PayPal. The email will not only look official, but will also have an official-looking network domain name and return address. The body will contain an innocuous message such as: "Your account information requires updating".

Spam is the equivalent of physical junk mail and unsolicited telemarketing phone calls. It has become one of the largest nuisances to computer users for both home and business users. n 2003 and 2004 spammers sent the majority of spam messages from machines belonging to unsuspecting users. Spammers use malware to install Trojans on users' machines, leaving them open to remote use. Methods used to penetrate victim machines include:

• Trojan droppers and downloaders injected into pirate software which is distributed via file sharing P2P networks (Kazaa, eDonkey etc.).
• Exploiting vulnerabilities in MS Windows and popular applications such as IE & Outlook.
• Email worms

Spware is as those that “impair users" control over material changes that affect their user experience, privacy, or system security; use of their system resources, including what programs are installed on their computers; or collection, use, and distribution of their personal or otherwise sensitive information.” “Spyware” is something of a grey area, so there’s no copy-book definition for it. However, as the name suggests, it’s often loosely defined as software that is designed to gather data from a computer and forward it to a third party without the consent or knowledge of the computer’s owner. This includes monitoring key strokes, collecting confidential information (passwords, credit card numbers, PIN numbers, etc.), harvesting e-mail addresses, or tracking browsing habits. There’s a further by-product of spyware where such activities inevitably affect network performance, slowing down the system and thereby affecting the whole business process.

Although all these seem frightening, there is a way out too. Online security is for the purpose of protecting e-commerce customers and their information by continuing to enhance e-commerce systems and processes as e-commerce transactions evolves. Because no single solution can ensure online security, a layered security approach with industry-leading solutions had been developed. Two major objectives in selecting the right electronic safeguards are:

• Protecting customers’ informations and assets.
• Minimizing customer impact while providing multiple layers of protection wherever customer transactions call for added security.

Are our data secured by just these online securities? It depends whether the consumers are aware enough about the threat they might faced if necessary steps isn’t taken to prevent them.

An Example of E-Commerce successand its causes...............

eBay .com is managed by an American Internet company called eBay incorporation. It was launched online in 1995. eBay.com is an online auction and shopping website was found in San Jose, California, USA by French-born Iranian computer programmer Pierre Omidyar. .This website allows people and business buy and sell goods and services worldwide. Originally, the site belonged to Echo Bay Technology Group, Omidyar's consulting firm. Omidyar had tried to register the domain name echobay.com (the domain has recently been put up for sale) but found it already taken by the Echo Bay Mines, a gold mining company, so he shortened it to his second choice, eBay.com. eBay.com is a website that originated from U.S. website, it has established localized website in thirty other countries:- Argentina, Australia, Austria, Belgium, Brazil, Canada, China, France, Germany, Hong Kong, India, Ireland, Israel, Italy, Malaysia, mexico, Netherlands, New Zealand, Philippines, Poland, Singapore, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan and Turkey.

eBay.com is providing something to everyone. Buyer can buy practically anything at great prices. No matter how latest electronics, designer fashion, rare antique, favorite toy, furniture for your home or even a new car, eBay always provide the best product for the buyer. Almost million of items such as computer, equipment, vehicles and other miscellaneous items are listed, sold and bought daily. But those items that is illegal and violate to eBay Prohibited and Restricted items policies do not allow sold through eBay.com like tobacco, alcohol, drugs, used underwear and dirty used clothing and others. eBay.com on the other hand also offers several types of auctions which are Auction-style listing, Fixed Price format and Dutch Auction. Auction-style listings allow the seller to offer one or more items for sale fir a specified number of days where the seller can establish a reserve price. Instead of choosing the auction-style listing, fixed price format is an another way for auction which allows the seller to offer one or more items for sale at a Buy It Now price. Buyers who agree to pay that price win the auction immediately without submitting a bid. Otherwise dutch auction also allow the seller to offer two or more identical items in the same auction. Bidders can bid for any number from one item up to the total number offered.

The domain eBay.com attracted at least 902 million visitors annually by according to a Complete.com study. This was thrice the numbers of walmart.com. There must be reasons behind that can lead eBay.com is more competitive advantage than walmart.com or other company that is running electronic commerce. The ebay.com provide guaranty to buy and sell with confidence. In addition, eBay.com is one of the safest places to trade online and make sure those buyers’ and sellers’ experience on eBay safe and fund. Moreover, Trust and Safety team work together to provide the great way to complete your purchase or sales. Nevertheless, eBay.com also help for trade with peace of mind by provide feedback system, buyer protection programme and dedicated security centre. That is about the key success for eBay with million of buyers and a safe and easy system, therefore eBay is a great place to sell. SO, WHAT ARE YOU WAITIING FOR!!!!!!

Quickily visit this website for more information about your online transaction:

http://www.ebay.com.my/

-----prepared by: Lyon-----

The failure of Napster and its caused

There are many companies extremely successful in the e-commerce business such as eBay, Amazon.com, Google and so on. On the other hand, there are also a large number of the companies’ failures to maintain their e-commerce. One of the company failures in the e-commerce is Napster.

Napster was a website provided online music file sharing service created by Shawn Fanning while he was attending Northeastern University in Boston and operating between June 1999 and July 2001. It was the first widely-used peer-to-peer sharing service, and it made a major impact on how people, especially university students, used the internet. It is a technology allowed music fans to easily share MP3 format song files with each other.

The primary reason that caused the Napster shut down is because leading to the music industry's accusations of massive copyright violations. In 2000, A&M records and several other recording companies sued Napster for contributory and vicarious copyright infringement under the US Digital Millennium Copyright Act (DCM Act). The music industry made the following claims against Napster:
(1) That its users were directly infringing the plaintiff's copyright;
(2) That Napster was liable for contributory infringement of the plaintiff's copyright; and
(3) That Napster was liable for vicarious infringement of the plaintiff's copyright.

Finally, Napster lost the case and the District Court ordered Napster to monitor the activities of its network and block access to infringing material when notified of that material’s location. Napster unable to do that, and so finally shut down its in July 2001 and declared bankrupt in 2002.

A company actually can avoid the pitfalls that plagued Napster by choosing a corporate culture which would insure that a similar situation doesn’t happen to your company. The companies, who interest to create a successful e-commerce, can entitle into the success company to refer them how to manage their business through internet and take up certain necessary action to maintain it.

Identify and compare the revenue model for Google, Amazon, and eBay.

To plan a portal venture successfully, careful analysis of the revenue models and customer adoption trends is essential. Make a mistake and you are liable to lose millions of dollars. So, what are the different revenue models? There are five basic portal revenue models: 1) access revenues, 2) advertising revenues, 3) subscription revenues, 4) transaction revenues, and 5) micro-transaction revenues. I will explain more on these revenue models when I pin point each of the models for three different companies which go online, Google, Amazon and eBay.

First and foremost, Google is a very famous, established and stable company that goes online. Its revenue models are Google AdWords which is a pay per click advertising program designed to allow the advertisers to present advertisements to the public at the second the people are looking for information related to what the advertiser has to offer.

The more recent revenue model of Google is the Google Publication Ads Program through which they distribute their advertisers’ ads for publication in magazines. Google recognize as revenue the fees charged advertisers when their ads are published in magazines.

Another model Google generate revenue is through Pay per Click Advertising. This model worked in such a way that it sends immediate, targeted traffic to public’s website. It is an online advertising payment model in which payment is based on qualifying click-through. An advertiser has to pay every time his advertisement receives a click. The Advertisers decide the keywords relevant to their offer that should display their advertisement and the maximum amount they are willing to pay per click for that keyword.

More than that,Google AdSense is also another revenue model. Website owners can enroll in this program to enable text, image and, video advertisements on their sites. Revenue is generated on a per-click or per-thousand-ads-displayed basis and the ads are administered by Google.

Furthermore, Google Answers is another revenue model too. Instead of performing a search ourselves users pay someone else to do the same. Customers ask questions, offer a price for an answer, and researchers answer them. Researchers are not Google employees. Prices for questions range from $2 to $200; after a question is answered, Google keeps 25% of the payment, sends the rest to the Researchers.

Last but not least, Froogle, a service from Google that makes it easy to find information about products for sale online. Froogle is a price engine website launched by Google Inc. Froogle is different from most other price engines in that it neither charges any fees for listings, nor accepts payment for products to show up first. Also, it makes no commission on sales. Any company can submit product information (via a “data feed”) and be included in the Froogle engine. Advertising space is available for purchase to be displayed in Froogle in the form of an AdWords ad.

eBay on the other hand generate its revenue from a number of fees.There are fees to list a product and fees when the product sells, plus several optional fees, all based on various factors and scales. For instance, the U.S.-based eBay.com takes $0.20 to $80 per listing and 5.25% or less of the final price.Besides, the Mexican eBay "mercado libre" takes 1% (price of the article × number of articles to be sold), and 4.99% of the final price if there is a successful trade. Other than that, the UK based ebay, it takes from £0.15 to a maximum rate of £3 per £100 for an ordinary listing and from 0.75% to 5.25% of the final price.

In addition, eBay now owns the PayPal payment system which has fees of its own. Revenues from PayPal's transaction fees were $243.9 million, a gain of 51 percent from the year-ago quarter and 145 percent from 2003. And the number of registered PayPal users shot up to 79 million from 50 million a year ago.

Under current U.S. law, a state cannot require sellers located outside the state to collect a sales tax, making deals more attractive to buyers. Although state laws require purchasers to pay sales tax to their own states on out-of-state purchases, most non-professional sellers ignore this requirement. However, most sellers that operate as a full time business do follow state tax regulations on their eBay transactions.However for the tax called Value Added Tax(VAT), eBay requires sellers to include the VAT fees in their listing price and not as an add-on and thus eBay profits by collecting fees based on what governments tax for VAT.

Another interesting aspect of eBay's revenue model is it's somewhat evenly spread out among a number of categories, with one glaring standout. Among the categories delivering more than $1 billion in gross market value are:

• Clothing and accessories -- $3.3 billion
• Consumer electronics -- $3.2 billion
• Computers -- $2.9 billion
• Home and garden -- $2.5 billion
• Books/Movies/Music -- $2.4 billion
• Sports -- $2.1 billion
• Collectibles -- $2.0 million
• Toys -- $1.6 billion
• Jewelry and watches -- $1.5 billion
• Business and industrial -- $1.5 billion
• Cameras and photos -- $1.3 billion

Moreover, the company's current business strategy includes increasing revenue by increasing international trade within the eBay system. eBay has already expanded to over two dozen countries including China and India.

Amazon.com has finished its 13th Christmas season and the results are the best ever season, with its busiest day being December 10. On that day, Amazon customers ordered more than 5.4 million items, which is 62.5 items per second. Amazon Worldwide 2007 (Including results for the US, UK, Germany, France, Japan and Canada) shipped more than 99 percent of orders in time to meet holiday deadlines worldwide and on the peak day this season, Amazon's worldwide fulfilment network shipped over 3.9 million units to over 200 countries.

Amazon.co.uk received orders for over 950,000 items on its busiest day in the run up to Christmas this year – at a rate of 11 orders per second – exceeding all previous sales records. At its busiest, Amazon.co.uk shipped over 700,000 units in one 24 hour period, which represents 375 tonnes of goods. That means that on average, a delivery truck was leaving an Amazon.co.uk distribution centre once every seven minutes."

Like eBay, Amazon.com was born in 1995. The name reflected the vision of Jeff Bezos, to produce a large scale phenomenon like the Amazon River. This ambition has proved justified since just 8 years later, Amazon passed the $5 billion sales mark – it took Wal-Mart 20 years to achieve this. These are Amazon’s revenue models.

These three companies had indeed amazing e-commerce revue models. No one company started well and still doing well, so are these companies. They faced their ups and downs and had gone stable for the mean time, but in the future, no one will know what the outcome of these companies is. It depends on them, how they manage the company. Whatever it is, it would be great to see more e-commerce successes than failures.