THREATS AND RISKS IN E-BUSINESS

Elektronsko poslovanje, ki je skozi tekom svojega razvoja postalo del našega vsakdanjega življenja je v veliki meri že izpodrinilo klasično poslovanje. Vzporedno z večanjem uporabe elektronskega poslovanja se veča število groženj in nevarnosti, kot so: nezaželena e-pošta, ribarjenje, zlorabe in kraje podatkov, napadi in poskusi vdorov ter zlonamerna programska oprema. Prav zaradi tega je pomembno, da so uporabniki seznanjeni s temi nevarnostmi, saj se le tako vedo tudi ustrezno zaščiti pred njimi z uporabo varnostnih mehanizmov, kot so: požarni zid, protivirusni programi, šifriranje, elektronski podpis, digitalno potrdilo. V diplomskem projektu smo opredelili in na kratko predstavili področje elektronskega poslovanja. Podrobneje smo obravnavali grožnje in nevarnosti, katere pretijo uporabnikom. Predstavili smo varnostne mehanizme, kateri slednjim nudijo in zagotavljajo varnost ter zaščito. Dotaknili smo se varnostne politike, katera je ključna pri zagotavljanju varnosti. Na koncu smo predstavili praktične primere vdorov pri katerih je prišlo do kraje podatkov.In the course of its development, electronic business has become a part of our everyday life, and has to a great extent already been displacing conventional business. In parallel with the increasing use of electronic business, the number of threats and dangers, such as spam, phishing, abuse and data theft, attacks and intrusion attempts, as well as malicious software, is increasing as well. That is why it is important that the users are aware of these dangers, since the only way they can adequately protect themselves from them is by using security mechanisms, such as firewall, antivirus software, encryption, electronic signature and digital certificate. In the diploma project, we have identified and briefly introduced the field of electronic business. More specifically, we addressed the threats and dangers which are lurking around. We presented security mechanisms, which provide and ensure safety and security to the users. We addressed security policy, which is crucial in ensuring security. Finally, we presented some practical examples of breaking into which resulted in the theft of data