Науковий вісник НГУ

Determination of the e-commerce security level

• 
• 

User Rating:  / 0

PoorBest 

Details

Category: Information technologies, systems analysis and administration

Last Updated on 04 June 2015

Published on 29 March 2015

Hits: 4631

Authors:

I.M. Pistunov, Dr. Sci. (Tech.), Professor, State Higher Educational Institution “National Mining University”, Economic Department of Cybernetics and Information Technologies Dnipropetrovsk, Ukraine.

Abstract:

Purpose. Risk management in e-commerce enterprises with the purpose of the risk reduction and determination of the main non-organization measures.

Methodology. The methods of probability theory, mathematical statistics and actuarial calculations have been used.

Findings. We have shown that analysis of the statistics of queries to the information system that serves e-commerce companies, as well as statistics of losses from alios acta for companies working in this field can reduce the risk. We have identified the following main ways of e-commerce risks reduction: definition of the beginning of a cyber-attack and e-commerce insurance. We have applied the methods of probability theory assuming that the number of requests to the information system is subject to exponential distribution law and calculated that when the number of requests rises by 50% the probability that the cyber-attack begins is 0.9. The use of techniques borrowed from actuarial calculations, assuming that this case can be considered as a risk insurance type, allowed us to determine the value of the net rate for e-commerce risk insurance through statistical market research.

Originality. Calculation of the critical number of queries to the site to determine the beginning of cyber-attacks is original and has scientific novelty. The proposed method of determination of the net rate for e-commerce risk insurance is original.

Practical value. All provisions presented in the article are ready for immediate implementation by structures dealing with security of e-commerce.

References:

1.     “Security of e-commerce”, (2004), available at: http://www.klerk.ru/soft/articles/6795/, (accessed February 26, 2014).

 Безопасность электронной коммерции [Електронний ресурс] – режим доступу: http://www.klerk. ru/soft/articles/6795/

2.     Ananko A., (2001), “The conclusion of contracts by electronic data interchange”, available at: http://www.russianlaw.net/law/edoc/esign/a123/, (accessed February 26, 2014).

 Ананько А. Заключение договоров путем электронного обмена данными [Електронний ресурс] / А. Ананько – режим доступу: http://www.гаssianlaw.net/la w/doс/а123.htm.

3.     Vynohradska, A. (2005), Osnovy pidpryiemnytstva [Fundamentals of Entrepreneurship], Kondor, Kyiv, Ukraine.

 Виноградська А. Основи підприємництва/ Виноградська А.;2-е вид., перероб. і доп. –К.: Кондор, 2005. –540 с.

4.     Volokitina, A.V. (2002), Elektronnaya kommertsyya [E-Commerce], NTC FIORD-INFO, Moscow, Russia.

 Волокитина А.В. Электорнная коммерция/ Волокитина А.В.; Под ред. Реймана Л.Д. – М.:НТЦ ФИОРД-ИНФО, 2002.– 250 с.

5.     Glossary on Information Society, available at: http://www.ijs.ru/glossary, (accessed February 26, 2014).

 Глоссарий по информационному обществу [Електронний ресурс] – режим доступу: //http://www.ijs.ru/glossary.

6.     Melikhova. L. (2001), Internet. Entsyklopedia [Internet. Encyclopedia], Piter, St.-Petersburg, Russia.

 Интернет. Энциклопедия / Под ред. Л. Мелиховой. – СПб.: Питер, 2001. – 520 c.

7.     Gnedenko, B.V. (1998), Kurs teorii veroyatnostey [Course on Probability Theory], Nauka, Moscow, Russia.

 Гнеденко Б.В. Курс теории вероятностей / Гнеденко Б.В.– М.: Наука, 1998. –449 с.

8.       Pistunov, I.M. (2004), Aktuarni rozrakhunky [Actuarial Calculations], Tutorial, RVK NHU, Dnipropetrovsk, Ukraine.

 Пістунов І.М. Актуарні розрахунки / Пістунов І.М. – Дніпропетровськ, РВК НГУ, 2004. – 164 с

2015_1_pistunov
2015-03-27  474.68 KB  1192

• < Prev
• Next >