功能逻辑在电子商务系统中应用的安全保障技术过程

Faisal Nabi, Muhammad Saqib Malhi, Muhammad Farhan, Umar Mahmood
{"title":"功能逻辑在电子商务系统中应用的安全保障技术过程","authors":"Faisal Nabi, Muhammad Saqib Malhi, Muhammad Farhan, Umar Mahmood","doi":"10.4236/JIS.2021.123010","DOIUrl":null,"url":null,"abstract":"Security \npractices such as Audits that often focus on penetration testing are performed \nto find flaws in some types of vulnerability & use tools, which have been \ntailored to resolve certain risks based on code errors, code conceptual assumptions bugs, etc. Most existing security practices in e-Commerce \nare dealt with as an auditing activity. They may have \npolicies of security, which are enforced by auditors who enable a particular \nset of items to be reviewed, but also fail \nto find vulnerabilities, which have been established in compliance with application logic. In this paper, we will \ninvestigate the problem of business logic vulnerability in the \ncomponent-based rapid development of e-commerce applications while reusing \ndesign specification of component. We propose secure application functional \nprocessing Logic Security technique for component-based \ne-commerce application, based on security requirement of e-business process and security assurance logical component \nbehaviour specification approach to \nformulize and design a solution for business logic vulnerability phenomena.","PeriodicalId":57259,"journal":{"name":"信息安全(英文)","volume":"12 1","pages":"189-211"},"PeriodicalIF":0.0000,"publicationDate":"2021-05-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":"{\"title\":\"Process of Security Assurance Technique for Application Functional Logic in E-Commerce Systems\",\"authors\":\"Faisal Nabi, Muhammad Saqib Malhi, Muhammad Farhan, Umar Mahmood\",\"doi\":\"10.4236/JIS.2021.123010\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Security \\npractices such as Audits that often focus on penetration testing are performed \\nto find flaws in some types of vulnerability & use tools, which have been \\ntailored to resolve certain risks based on code errors, code conceptual assumptions bugs, etc. Most existing security practices in e-Commerce \\nare dealt with as an auditing activity. They may have \\npolicies of security, which are enforced by auditors who enable a particular \\nset of items to be reviewed, but also fail \\nto find vulnerabilities, which have been established in compliance with application logic. In this paper, we will \\ninvestigate the problem of business logic vulnerability in the \\ncomponent-based rapid development of e-commerce applications while reusing \\ndesign specification of component. We propose secure application functional \\nprocessing Logic Security technique for component-based \\ne-commerce application, based on security requirement of e-business process and security assurance logical component \\nbehaviour specification approach to \\nformulize and design a solution for business logic vulnerability phenomena.\",\"PeriodicalId\":57259,\"journal\":{\"name\":\"信息安全(英文)\",\"volume\":\"12 1\",\"pages\":\"189-211\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2021-05-13\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"2\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"信息安全(英文)\",\"FirstCategoryId\":\"1093\",\"ListUrlMain\":\"https://doi.org/10.4236/JIS.2021.123010\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"信息安全(英文)","FirstCategoryId":"1093","ListUrlMain":"https://doi.org/10.4236/JIS.2021.123010","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 2

摘要

安全实践,如审计,通常侧重于渗透测试,以发现某些类型的漏洞和使用工具的缺陷,这些工具已经被定制,以解决基于代码错误,代码概念假设错误等的某些风险。电子商务中大多数现有的安全实践都是作为审计活动处理的。它们可能有安全策略,这些策略由审计人员执行,审计人员允许审查一组特定的项目,但也无法发现漏洞,这些漏洞是根据应用程序逻辑建立的。本文研究了在重用组件设计规范的情况下,基于组件的电子商务应用快速开发中的业务逻辑漏洞问题。提出了基于组件的电子商务应用的安全应用功能处理逻辑安全技术,基于电子商务流程的安全需求和安全保障逻辑组件行为规范方法,对业务逻辑漏洞现象进行了形式化设计解决方案。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
查看原文
分享 分享
微信好友 朋友圈 QQ好友 复制链接
本刊更多论文
Process of Security Assurance Technique for Application Functional Logic in E-Commerce Systems
Security practices such as Audits that often focus on penetration testing are performed to find flaws in some types of vulnerability & use tools, which have been tailored to resolve certain risks based on code errors, code conceptual assumptions bugs, etc. Most existing security practices in e-Commerce are dealt with as an auditing activity. They may have policies of security, which are enforced by auditors who enable a particular set of items to be reviewed, but also fail to find vulnerabilities, which have been established in compliance with application logic. In this paper, we will investigate the problem of business logic vulnerability in the component-based rapid development of e-commerce applications while reusing design specification of component. We propose secure application functional processing Logic Security technique for component-based e-commerce application, based on security requirement of e-business process and security assurance logical component behaviour specification approach to formulize and design a solution for business logic vulnerability phenomena.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
211
期刊最新文献
Secure Web Application Technologies Implementation through Hardening Security Headers Using Automated Threat Modelling Techniques Research and Practice on High Availability Scheme of Unified Identity Authentication System Based on CAS in Colleges and Universities Learning with Errors Public Key Cryptosystem with Its Security User Station Security Protection Method Based on Random Domain Name Detection and Active Defense Towards a New Model for the Production of Civil Status Records Using Blockchain
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
已复制链接
已复制链接
快去分享给好友吧!
我知道了
×
扫码分享
扫码分享
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1