mpanies who are listed with verification sites actually
exhibit on line a seal showing that they are listed with the verification
site. This is a method of voluntary self regulation. For example,
customers who use sites which have the Better Business Bureau Online logo
can actually click the logo and get a report on the company, as well as a
searchable data base of company reports. This can be helpful to the
client, but again is an issue which is entirely voluntary and does not
dictate for the site any specific security standards like the protection of
the information provided to the site.
Web site security standards are unregulated, although with the
burgeoning web based commerce boom, web sites are more and more expected to
develop high standards for information security. Even web sites which pass
certification standards set by the companies listed in the last paragraph
does not mean that the site is impervious to all attacks. They are instead
meant to imply that a base level of security for the site is being
maintained, rather than guarantee that the web site is hacker proof.
Certain standards have been suggested to make data from web sites more
secure, and a good web site administrator will strive for these standards.
A web site must be able to withstand any kind of network based attack,
usually by means of a firewall, which protects connections between
trustworthy and untrustworthy networks. Web sites may also elect to use a
filtering router or another appropriate measure of security. Well
protected sites must maintain logging, although access to logs should be
...