SECURITY POLICY OF ELECTRONIC COMMERCE

V današnjem času si poslovanja več ni moč predstavljati brez računalnika. Danes elektronsko poslovanje obsega veliko več kot le navadno izmenjavo računalniških podatkov in delovanje spletne trgovine. Vse kar delamo v sklopu svoje poslovne dejavnosti s pomočjo računalniških aplikacij in računalniških omrežij imenujemo e-poslovanje. E-poslovanje je zato zelo široko področje, ki zajema tehnične, tehnološke, ekonomske, pravne in organizacijske okvirje. Elektronsko poslovanje nudi veliko prednosti tako za posameznika kot tudi za podjetje. Najpomembnejše med njimi so: večja udobnost, večja ponudba, nižje cene, večja operativna učinkovitost, boljše upravljanje oskrbovalnih verig itd. Pri elektronskem poslovanju pa se lahko srečamo tudi z negativnimi stranmi. Te so: možnost prevar, ogrožanje zasebnosti, konflikti med prodajnimi kanali, visoke investicije in zaostrovanje konkurence. Nevarnosti, ki ogrožajo elektronsko poslovanje je vedno več, prav tako je več učinkov in načinov realizacije groženj, zato je pomembno, da zaščiti in varnostni politiki namenimo vse večjo vlogo. Najpomembnejše nevarnosti oziroma grožnje so naslednje: računalniški virusi, črvi, trojanski konj, prevare, nezaželeno oglaševanje preko e-pošte, verižna pisma, kraje itd. Bistvo varnosti v elektronskem poslovanju je preprečevanje nepooblaščenega zmanjševanja vrednosti virov. Viri so lahko zaupni podatki, na primer poslovne skrivnosti, številke kreditnih kartic in elektronski dokumenti o zdravstvenem stanju pacienta, ali pa strojna in programska oprema sistemov, povezanih v javno omrežje. Za zagotovitev varnosti je na voljo veliko različne programske in strojne opreme ter fizičnega varovanja. Ukrepi morajo biti postavljeni na široko, saj je težko vnaprej predvideti smer napada. Med varnostne ukrepe sodijo: požarni zid, kriptografija, elektronski podpis, digitalno potrdilo, gesla, pametne kartice in protivirusni programi.Nowadays we can no longer imagine business without a computer. E- Business consists of much more than just computer exchange of data and online trading. Everything that involves our business activities by IT applications and computer networks is known as e-business. E-business is therefore very broad range covering technical, economic, legal and organizational frameworks. E-business offers many benefits for both individual and company. Most important are: more comfort, lower prices, higher operational efficiency, efficient management of supply chains etc… With e- business we are also exposed to some negative consequences. These are: possibility of frauds, privacy threats, conflicts among sales channels, high investments, and tightened competition. Threats to e-business are increasing as also their methods and modes of their realization are multiplying, that is why the protection and security policy in the companies should be addressed with higher importance. Most important risks and threats are the following: computer viruses, worms, Trojan horses, scams, spam advertising through e-mails, chain letters, thefts, etc… The essence of security in e-commerce is the prevention of unauthorized reduction of the value of sources. Sources can be confidential information, such as business secrets, credit card numbers and electronic documents on patient’s medical condition or hardware and software system linked to the public network. To ensure the security there are a lot of various software, hardware and physical protection. Measures must be set for wide range of threats as it is very difficult to predict the direction of attack. Safety measures include: firewall, cryptography, digital signature, digital certificate, passwords, smart cards and antivirus programs