ABSTRACT

One of the key issues surrounding an open system like the Internet is security: security of data, e-mail, and financial transactions. Some business managers troubled by recently publicized security breaches have decided to take a wait-and-see approach. Security is a valid concern, but many of the risks are viewed as greatly overrated by some industry analysts. An increasing number of corporations and financial institutions are installing Web servers on internal corporate networks for private purposes such as human resources information and internal databases. Financial institutions have the choice of installing banking software products on the Internet, an open system, or on a proprietary, closed, intranet system. Financial institutions must carefully instruct their customers on the importance of protecting their sign-on security information. Security should be designed in layers to present multiple, difficult obstacles for a possible intruder. Categories of security include customer security, encryption of data over phone lines, Web server security measures, host data protection, and internal network techniques.