RE: Maximum Online Transaction Amount....

From: Craig Humphrey (Craig.Humphrey@ChapmanTripp.com)
Date: 08/27/02 

From: Craig Humphrey <Craig.Humphrey@ChapmanTripp.com>
To: 'James McGee' <james__mcgee@hotmail.com>, security-basics@securityfocus.com
Date: Wed, 28 Aug 2002 08:32:30 +1200

Hi James,

two thoughts on this:

1. If your firm is dealing with GBP£100mil transactions and they don't want
to spend on a CA and PKI, then you've got a bigger problem at hand.

2. We've implemented our own CA and PKI here, at basically no cost. The
downside.... it's all Microsoft. We use the MS CA (comes as a freebee with
WinNT Server and Win2K Server). So if you don't mind using MS products....

Later'ish
Craig

> -----Original Message-----
> From: James McGee [mailto:james__mcgee@hotmail.com]
> Sent: Wednesday, 28 August 2002 12:38 AM
> To: security-basics@securityfocus.com
> Subject: Maximum Online Transaction Amount....
>
>
> I have been asked to make recommendations for a new systems
> security.
> Trouble is I really dont like the idea of it too much.
>
> Basically, there could be transactions in the region of up to GBP£
> 100,000,000 going through! One way would be the use of a
> Internal CA and a
> PKI system. But they are not prepared to invest those sorts
> of sums for
> this particular project.
>
> Can anyone recommend any papers or documents advising on securing
> transactions of this level, or even limiting transactions to
> a certain
> level?

Relevant Pages

  • Re: The Vernacular of Security Narrative
    ... :process millions of transactions per time frame. ... then they're likely encrypting -everything-. ... :opportunity to successfully exploit an insider's glimpse of security is ... unless the business is very stupid, the business isn't going to rely ...
    (comp.security.misc)
  • Re: The satate of software
    ... level security processes, by and large, than a "software crisis". ... commerce" we had to do some detailed look at assumptions about how *SSL* ... attackers for the purpose of fraudulent financial transactions. ... security proportional to risk metaphor ...
    (comp.arch)
  • Re: Maximum Online Transaction Amount....
    ... more or less public e-commerce web site? ... any decent basic security book or training probably helps ... > I have been asked to make recommendations for a new systems security. ... there could be transactions in the region of up to GBP£ ...
    (Security-Basics)
  • Re: Change One Thing
    ... Delineate for us the place in the sig where Niven excludes the ... I think the point is that society's transactions in this domain observe ... robbery implies that you didn't have as much security as you thought ... point, security is purchased at the cost of freedom, or freedom is ...
    (rec.arts.sf.written)
  • Re: T.J. Maxx data theft worse than first reported
    ... do payment transactions on their server. ... a "payment gateway" was developed and deployed ... ... analogous to a corporate POS concentrator ... ... (i.e. had to demonstrate security procedures that were proportional to ...
    (bit.listserv.ibm-main)