ENISA-FORTH Summer School on Network and information Security (September 2008, Crete, Greece)


Dr. Claire Vishik

Dr. Claire Vishik
Dr. Claire Vishik works at Intel Corporation UK. Her work focuses on hardware security, trusted computing, privacy enhancing technologies, some aspects of encryption and related policy issues. Claire is a member of the Permanent Stakeholders Group of ENISA, the European Network and Information Security Agency. She is active in standards development and is on the Board of Directors of TCG, the Trusted Computing Group. Claire received her PhD from the University of Texas at Austin. Prior to joining Intel, Claire worked at Schlumberger Laboratory for Computer Science and AT&T (SBC) Laboratories studying security and other aspects of Internet technologies, from electronic commerce and communication protocols to software systems and applications. Claire is the author of many papers and reports and 23 pending and granted US patents.

Building Secure E-commerce Systems

Abstract:
Internet-based electronic commerce is ubiquitous in developed countries, with purchases, bill payment, and other online interactions becoming routine for many people. Although concerns about security and privacy exist, clearly there is enough trust in digital economy to ensure that electronic commerce continues to grow. But what does it take to build secure electronic commerce systems? The talk will start with the history of electronic commerce, outline main areas of security that need to be addressed when discussing secure e-commerce, evaluate privacy issues associated with e-commerce applications, explain common security features in standard transport and application protocols as well as security features in user-facing and back-end electronic commerce systems, address issues of usability and usage patterns, and conclude with implementation examples for various types of e-commerce systems.