Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.

What are the security issues in ecommerce?

I currently have: Transport layer security issues

  • data being intercepted (ccard details stolen etc)

Vulnerability in web app

  • SQL Injection
  • XSS

Client side

  • malware
  • stealing ccard details etc.

Am I missing anything else?

Thanks

share|improve this question
This question is not really answerable in any meaningful way. Most of the security issues exist are also relevant to e-commerce. If you reword this question to address the specific issue you are currently having I can reopen it and you may get useful answers. – Rory Alsop May 1 '12 at 17:56
If data is actually being intercepted then you are sending the data in the incorrect way. You should be encrypting the data so only the sender and the reciever can decrypt it. – Ramhound May 2 '12 at 13:09

closed as not a real question by Scott Pack, Rory Alsop May 1 '12 at 17:54

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.

1 Answer

A few things I would add

  • Physical Security (where is your box stored, who has access to it, what is the networking like)
  • Remote File Inclusion attacks

  • Local File Inclusion attacks

  • DDos Attacks (cause loss of uptime, cost you money by revenue loss and potential bandwidth overage charges)
  • Vulnerable code - bugs (accidental) or backdoor's(malicious) programmed in
share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.