|
There is an old Chinese curse that
can be paraphrased as May you live in interesting
times. With
the omnipresence of the Internet in our everyday lives I
believe that we are now living in interesting times.
In the early 90s during the
infancy of the Internet there was no real commercial
utilization of the network. You could look at artwork that was in Paris, research topics
at a university in Sweden or even check on how much coffee
was in a coffeepot in England but you couldnt buy
flowers or books or pizza.
It was entertaining; it was fun, but that has all
changed in the past few years.
Now the Internet is big business and with big
business comes big bucks.
It is still a new frontier much like
the days when folks used cross the country in
stagecoaches. There
is a sizeable amount of opportunity, a vast world where
you can setup shop and catch the eye of those cyber-wagon
trains passing by your virtual town.
OK, I promise that will be the last of my
information superhighway metaphors in this article
as I am about as sick of them as you, but I think you get
my point that it is a wild and wooly cyber-world with lots
of opportunity. Of course, it is important to note that the Internet has
its own fair share of nefarious individuals as well and
much like the days of the wild west, law enforcement is
spread a little thin and having a bit of trouble keeping
up with all the entrepreneurial criminals that are out
there.
The Internet has now entered a new
age with the creation of the cyber-terrorist that is both
willing and able to attack and electronically destroy that
little shop on the corner you so lovingly setup.
Its a dangerous new era with little risk of
being caught and enormous amounts of money at stake for
the business owner. Take
the recent attacks against Yahoo and E*Trade that took
their sites offline. With sites like Yahoo brining in nearly $2 million each day
it is conceivable that some cyber-punk will figure out
that he could hold these companies hostage for money.
Its not even all that complicated to pull off.
You dont need to be a computing wizard to cook
up cyber-terrorism scheme, just access to the Internet.
There are plenty of freely available tools that
make it possible for even a relative newbie to pull off
the crime of the century and the risk that they will be
caught is small enough that it is starting to gain some
appeal. Can
you imagine some 13-year-old holding Ebay hostage?
Hey mister, your money or your site!
Or how about a protection racket in
cyberspace? Now
some surly mobster could conceivably tell a company,
Hey, were just looking out for your well being here.
We would hate to have anything bad happen to your
business. I
can even picture the big grin on his face complete with
gold caps on one of his front teeth.
They wouldnt even have to hire big burley guys
to break the place up as any geek with a Macintosh could
do the job and leave little or no trace.
The online music shop CD Universe
already experienced similar cyber-extortion when a
computer interloper demanded $100,000 or he would release
the credit card numbers of the companys customers on
the Net. The
interloper had copied 300,000 credit-card numbers from CD
Universes file servers and was holding them hostage.
CD Universe refused to pay and the extortionist
released around 25,000 of the stolen numbers.
Not exactly the kind of positive PR that encourages
customers to shop with you.
Make no mistake; extortion,
embezzlement, forgery and other crimes are coming to the
Net. Dont
get me wrong I am not trying to discourage or frighten you
from doing business on the Net. On the contrary, there is
a wealth of opportunity to be had for all who wish to
participate in e-commerce. I just want to educate and
encourage those wanting to get into e-commerce to be very
savvy and sober in their decisions.
No longer can you just get some mom and pop ISP to
host your site if you want to deal with money and credit
cards. You
will need to do business with experienced web hosting
companies with a proven track record in e-commerce.
Take the time to educate yourself to the realities
of the issue by reading up on books like Maximum
Security, second edition (ISBN 0-672-31341-3).
This book takes are realistic look from the
perspective of a convicted hacker and provides a wealth of
information for those trying to secure their computer,
network or web site. You might also want to check out
Network Intrusion Detection, An Analysts Handbook by
Stephen Northcutt (ISBN 0-7357-0868-1).
Do the homework and dont get fooled by the
so-called security experts that are popping up everywhere
like television evangelists.
Ask for references and check their resume
diligently and if they were a Y2K consultant, run away
screaming.
|