Security of electronic business applications: Structure and quantification

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 1875, Issue , 2000, Pages 25-37

  Knorr, Konstantin ^a   Röhrig, Susanne ^b  

^a UNIVERSITY OF ZURICH   (Switzerland)

^b SWISSiT Informationstechnik AG   (Switzerland)

Author keywords

Electronic business application; Security; Security quantifier

Indexed keywords

COMMERCE; NETWORK SECURITY;

ELECTRONIC BUSINESS; RAPID GROWTH; SECURITY; SECURITY MEASURE; SECURITY MECHANISM; SECURITY OBJECTIVES; SECURITY QUANTIFIER; STRUCTURED APPROACH;

ELECTRONIC COMMERCE;

EID: 84958674625     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-44463-7_3     Document Type: Conference Paper

References (26)

1. Jo Bager, Holger Bleich, Patrick Brauch, and Axel Kossel. Natürliche Abwehrkräfte: Windows- und Internet-Software richtig konfigurieren, c’t, Feb. 2000, pp. 214-223.
2. A. Bhargava and B. Bhargava. Measurement and quality of services in electronic commerce software. In Proc. of the IEEE Symposium on Application-Specific Systems and Software Engineering and Technology, 1999.
3. S. Brocklehurst, B. Littlewod, T. Olovsson, and E. Jonsson. On measurement of operational security. In Proc. of the 9th Annual Conference on Computer Assurance, COMPASS’94, 1994.
4. British Standards Institute. BS7799: Code of Practice for Information Security Management (CoP), 1995.
5. Bundesamt für die Sicherheit in der Informationstechnik (BSI), Bonn. IT-Grund- schutzhandbuch: Maßnahmenempfehlungen für den mittleren Schutzbedarf, 3 edition, Juli 1997.
6. Common Criteria for Information Technology and Security Evaluation: Part 1: Introduction and general model. International Standard ISO/IEC 15408, May 1998.
7. William R. Cheswick and Steven M. Bellovin. Firewalls and Internet Security - Repelling the Wily Hacker. Professional Computing Series. Addison Wesley, 1994.
8. Cheskin Research and Studio Archetype/Sapient. eCommerce Trust Study, January 1999.
9. D. Damm, Ph. Kirsch, Th. Schlienger, S. Teufel, H. Weider, and U. Zurfiuh. Rapid Secure Development: Ein Verfahren zur Definition eines InternetSicherheitskonzeptes. Tech. Report, Inst, für Informatik, Uni. Zürich, 02/1999.
10. Lutz Donnerhacke and Steffen Peter. Vorsicht Fallel ActiveX als Füllhorn für Langfinger. iX, März 1997.
11. Dan Farmer and Wietse Venema. Improving the Security of Your Site by Breaking Into it. http://wzv.tue.nl/satan/admin-guide-to-cracking.html, 1993.
12. Thomas Gaugier. Interorganisatorische Informationssysteme (IOS): Ein Gestaltungsrahmen für das Informationsmanagment. PhD thesis, Institut für Informatik, Universität Zürich, 1999.
13. A.K. Ghosh. Securing E-Commerce: A Systematic Approach. Journal of Internet Banking and Commerce, 1997.
14. Internet Security Systems. Network and Host-based Vulnerability Assessment, 1998. http://www.iss.net.
15. Andrun Josang. A subjective metric of authentication. In Proc. of the 5th European Symposium on Reserach in Computer Security, LNCS 1485, pages 329-344, Belgium, Sep. 1998.
16. D. Kristol and L. Montulli. HTTP State Management Mechanism. RFC 2109, February 1997.
17. John Markoff. Security Flaw Discovered at Online Bank. The New York Times, January 2000.
18. Ueli Maurer. Modelling a public-key infrastructure. In Proc. of the 5th European Symposium on Reserach in Computer Security, pages 325-350, Italy, Sep. 1996.
19. V. McCarthy. Web-Security: How Much Is Enough? Datamation, January 1997.
20. Günter Müller and Detlef Schoder. Potentiale und Hürden des Electronic Commerce - Eine Momentaufnahme. Informatik Spektrum, August 1999.
21. Adam R. Nabil and Yelena Yesha, editors. Electronic Commerce: Current Research Issues and Applications. LNCS 1028, Springer, 1996.
22. Rolf Oppliger. Internet Security: Firewalls and Beyond. Communications of the ACM, 40(5), May 1997.
23. Arndt Schönberg and Wilfried Thoben. Ein unscharfes Bewertungskonzept für die Bedrohungs- und Risikoanalyse Workflow-basierter Anwendungen. In Sicherheit und Electronic Commerce - Konzepte, Modelle und technische Möglichkeiten (WS SEC’98), pp. 47-62, Vieweg-Verlag, 1998.
24. T. C. Ting. How secure is secure: Some thoughts on security metrics. In Proc. of the 9th annual IFIP WG 11.3 Working Conference on Database Security, pp. 3-7, Lake Tahoe, CA, Aug. 1995.
25. P.R. Zimmermann. The Official PGP User’s Guide. MIT Press, 1995.
26. V. Zwass. Electronic Commerce: Structures and Issues. International Journal of Electronic Commerce, 1(1): 3-23, 1996.