Table Of ContentAdvanced Studies in E- Commerce
Ronggang Zhang · Lijuan Fang ·
Xiaoping He · Chuan Wei
The Whole Process of
E-commerce Security
Management System
Design and Implementation
Advanced Studies in E-Commerce
Series Editors
Zheng Qin, School of Software, School of Information Science and Technology,
Tsinghua University, Beijing, China
Qinghong Shuai, School of Economic Information Engineering, Southwestern
University of Finance and Economics, Chengdu, China
Ronggang Zhang, School of Management, Northwest University of Politics and
Law, Xi’an, China
Qiongwei Ye, Professor and Associate Dean in the Business School, Yunnan
University of Finance and Economics, Kunming, Yunnan, China
Li Xiong, Department of Information Management, Shanghai University,
Shanghai, China
Jie Cao, Professor in the College of Information Engineering, Nanjing University
of Finance and Economics, Nanjing, China
Advanced Studies in E-Commerce takes a fresh and global viewpoint to E-Commerce
development. It encompasses such issues as the basic concepts and principles of
E-Commerce, the industry chain of E-Commerce, the security management of E-
Commerce; the architecture of E-Commerce; the analytics of E-Commerce; and
some cutting-edge topics of E-Commerce.
· · ·
Ronggang Zhang Lijuan Fang Xiaoping He
Chuan Wei
The Whole Process
of E-commerce Security
Management System
Design and Implementation
Ronggang Zhang Lijuan Fang
School of Management School of Management
Northwest University of Politics and Law Northwest University of Science and Law
Xi’an, China Shaanxi Province, China
Xiaoping He Chuan Wei
School of Rule of Law Center for Risk and Crisis Management
Northwest University of Political Science Northwest University of Science and Law
and Law Xi’an, China
Xi’an, China
Advanced Studies in E-Commerce
ISBN 978-981-19-9457-9 ISBN 978-981-19-9458-6 (eBook)
https://doi.org/10.1007/978-981-19-9458-6
Jointly published with Xi’an Jiaotong University Press
The print edition is not for sale in China (Mainland). Customers from China (Mainland) please order the
print book from: Xi’an Jiaotong University Press.
© Xi’an Jiaotong University Press 2023
This work is subject to copyright. All rights are solely and exclusively licensed by the Publisher, whether
the whole or part of the material is concerned, specifically the rights of translation, reprinting, reuse
of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and
transmission or information storage and retrieval, electronic adaptation, computer software, or by similar
or dissimilar methodology now known or hereafter developed.
The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication
does not imply, even in the absence of a specific statement, that such names are exempt from the relevant
protective laws and regulations and therefore free for general use.
The publishers, the authors, and the editors are safe to assume that the advice and information in this book
are believed to be true and accurate at the date of publication. Neither the publishers nor the authors or
the editors give a warranty, expressed or implied, with respect to the material contained herein or for any
errors or omissions that may have been made. The publishers remain neutral with regard to jurisdictional
claims in published maps and institutional affiliations.
This Springer imprint is published by the registered company Springer Nature Singapore Pte Ltd.
The registered company address is: 152 Beach Road, #21-01/04 Gateway East, Singapore 189721,
Singapore
Contents
1 Introduction ................................................... 1
1.1 E-commerce and E-commerce Security ........................ 1
1.1.1 E-commerce from the Perspective of Security ............ 1
1.1.2 E-commerce Security and Its Importance ................ 4
1.2 E-commerce Security Requirements ........................... 6
1.2.1 E-commerce Security Elements ........................ 6
1.2.2 Logical Hierarchy of E-commerce and Its Security
Requirements ....................................... 7
1.3 Content of E-commerce Security Management .................. 8
1.3.1 Connotation of E-commerce Security Management ....... 8
1.3.2 E-commerce Security Management Means ............... 11
Reference ...................................................... 13
2 E-commerce Security Management Plan ......................... 15
2.1 Basic Concepts ............................................. 15
2.2 Elements and Types of E-commerce Security Management
Plan ...................................................... 16
2.2.1 Elements of E-commerce Security Management Plan ...... 16
2.2.2 Types of E-commerce Security Management Plans ........ 16
2.3 Preparation and Optimization of E-commerce Security
Management Plan .......................................... 17
2.3.1 Preparation of E-commerce Security Management
Plan ................................................ 18
2.3.2 Optimization of E-commerce Security Management
Plan ................................................ 19
2.4 E-commerce Safety Management Emergency Plan .............. 19
2.4.1 Overview of E-commerce Security Management
Emergency Plan ..................................... 19
2.4.2 Formulation of ERP for E-commerce Security
Management ........................................ 21
v
vi Contents
2.4.3 Formulation of DRP for E-commerce Security
Management ........................................ 30
2.4.4 Formulation of BCP for E-commerce Security
Management ........................................ 35
Reference ...................................................... 36
3 E-commerce Security Management Resources
and Organization ............................................... 37
3.1 Meaning and Relationship of E-commerce Security
Management Resources and Organizations ..................... 37
3.1.1 Meaning of E-commerce Security Management
Resources and Organization ........................... 37
3.1.2 Relationship Between E-commerce Security
Management Resources and Organization ............... 39
3.2 E-commerce Security Management Resources .................. 39
3.2.1 Composition and Limitation of E-commerce Security
Management Resources ............................... 40
3.2.2 Configuration of E-commerce Security Management
Resources ........................................... 42
3.3 E-commerce Security Management Organization ................ 47
3.3.1 Establishment of E-commerce Security Management
Organization ........................................ 47
3.3.2 Operation of E-commerce Security Management
Organization ........................................ 55
3.3.3 Transformation of E-commerce Security Management
Organization ........................................ 57
References ..................................................... 60
4 Controlling Information Risk in E-commerce ..................... 61
4.1 E-commerce Information Security Risk Management
Process, Participants, and Responsibilities ...................... 61
4.1.1 Information Security Risk Management Process .......... 61
4.1.2 Participants in Information Security Risk Management
and Their Responsibilities ............................. 63
4.2 E-commerce Information Security Risk Assessment
and Decision-Making ....................................... 64
4.2.1 Information Security Risk Assessment .................. 65
4.2.2 Information Security Risk Disposal Decision ............. 73
4.3 Implementation of E-commerce Information Security Risk
Control ................................................... 74
4.3.1 Overview of Risk Control ............................. 75
4.3.2 Technical Measures .................................. 79
4.3.3 Normative Measures .................................. 102
References ..................................................... 120
Contents vii
5 Controlling Network Risk in E-commerce ........................ 121
5.1 E-commerce Network Security Threats and Risk Identification .... 121
5.1.1 Security Threats to E-commerce Networks ............... 122
5.1.2 E-commerce Network Security Risk Identification ........ 125
5.2 E-commerce Network Security Risk Assessment ................ 126
5.2.1 Elements of E-commerce Network Security Risk
Assessment ......................................... 126
5.2.2 E-commerce Network Security Risk Assessment
Process ............................................. 127
5.3 Implementation of E-commerce Network Security Risk
Control ................................................... 129
5.3.1 Network Security Model .............................. 129
5.3.2 Technical Measures .................................. 130
5.3.3 Regulatory Measures ................................. 169
References ..................................................... 179
6 Controlling Transaction Risk in E-commerce ..................... 181
6.1 Risk Identification of E-commerce Transactions ................ 181
6.1.1 Pre-transaction of E-commerce Risks ................... 181
6.1.2 Risk in E-commerce Transactions ...................... 185
6.1.3 Post-transaction Risk of E-commerce ................... 189
6.2 Risk Assessment and Decision-Making of E-commerce
Transactions ............................................... 190
6.2.1 The Angle of E-commerce Transaction Risk
Assessment Insurance ................................ 190
6.2.2 Evaluation Index System of E-commerce Transaction
Risk ................................................ 191
6.2.3 Risk Control Decision of E-commerce Transaction ........ 192
6.3 Implementation of Risk Control of E-commerce Transactions ..... 193
6.3.1 Concepts and Properties of the Specification ............. 193
6.3.2 Compliance Transactions of the Participants
in E-commerce Transactions ........................... 195
6.3.3 Market Regulation ................................... 210
6.3.4 Industry Self-Discipline and Social Supervision .......... 222
7 Controlling Credit Risk in E-commerce .......................... 225
7.1 E-commerce Credit Risk Identification ........................ 225
7.1.1 Concepts of E-commerce Credit Risk Related ............ 226
7.1.2 Impact Factors and Origin of E-commerce Credit Risk .... 227
7.1.3 Performance of E-commerce Credit Risk ................ 228
7.2 E-commerce Credit Risk Assessment and Decision-Making ...... 231
7.2.1 Overview of Credit Evaluation ......................... 231
7.2.2 Credit Risk Evaluation Process ......................... 237
7.2.3 Credit Risk Control Decision-Making ................... 253
7.3 Implementation of E-commerce Credit Risk Control ............. 254
7.3.1 Guiding Ideology and Basic Principles .................. 254
viii Contents
7.3.2 Credit Risk Control Mechanism ........................ 255
7.3.3 Regulations, System, and Integrity Construction .......... 260
8 Controlling Risk of E-commerce Personnel ....................... 261
8.1 Risk Analysis of E-commerce Personnel ....................... 261
8.1.1 Necessity of Risk Management for E-commerce
Personnel ........................................... 261
8.1.2 Risk Causes and Types of E-commerce Personnel ......... 262
8.2 Risk Identification, Assessment, and Decision-Making
of E-commerce Personnel ................................... 264
8.2.1 Risk Identification of E-commerce Personnel ............ 264
8.2.2 Risk Assessment for E-commerce Personnel ............. 265
8.2.3 Risk Control Decision of E-commerce Personnel ......... 266
8.3 Implementation of Risk Control for E-commerce Personnel ....... 268
8.3.1 Personnel Management System ........................ 268
8.3.2 Safety Education and Training ......................... 272
8.3.3 Enhance Safety Awareness ............................ 275
8.3.4 Honesty Education and the Construction of Integrity
Culture ............................................. 277
8.3.5 Improve the Personnel Training Mechanism ............. 278
9 Supervision and Optimization Mechanism of E-commerce
Security Management .......................................... 281
9.1 Supervision Mechanism of E-commerce Safety Management ..... 281
9.1.1 The Dynamic Mechanism of E-commerce Safety
Management and Supervision .......................... 282
9.1.2 Formation of E-commerce Safety Management
and Supervision Mechanism ........................... 286
9.2 Optimization Mechanism of E-commerce Security
Management ............................................... 287
9.2.1 Management Optimization and E-commerce Security
Management Optimization ............................ 288
9.2.2 Significance and Objectives of Continuous
Optimization of E-commerce Security Management ....... 288
9.2.3 Realization of E-commerce Security Management
Optimization ........................................ 290
References ..................................................... 294
Chapter 1
Introduction
1.1 E-commerce and E-commerce Security
The growth of electronic commerce from the bud to rise, and then occupying the main
channel of business activities, the change and evolution of electronic commerce is
very rapid and violent. The book argues that e-commerce is a transaction activity
based on the media of information network. The transaction goods can be mate-
rial products or non-material services, and the transaction process may also involve
property rights. Since this book mainly studies and discusses the security manage-
ment of e-commerce, all business activities realized through, relying on, based on,
or with the help of information network can be included in the category of electronic
commerce, that is to say, from the perspective of security, all business activities based
on electronic information network are investigated.
1.1.1 E-commerce from the Perspective of Security
1. E-commerce must pursue systematic security
First of all, e-commerce is a huge system of engineering. According to system theory,
system generally refers to the whole which is composed of different subsystems in
a certain range or the same kind of things in a certain order and internal connection.
E-commerce consists of platform operators, product or service providers, network
consumers, manufacturers, distributors, retailers, logistics service providers, regu-
lators, and other groups involved in close cooperation, forming a huge system. E-
commerce from the perspective of security can be regarded as a system operating
under security. Figure 1.1 shows the schematic diagram of the e-commerce system.
Secondly, e-commerce security is systematic security. System theory holds
that openness, self-organization, complexity, integrity, relevance, dynamic balance,
timing, etc., are the common basic characteristics of all systems. System has both its
own characteristics and the characteristics of communication with the outside world.
© The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2023 1
R. Zhang et al., The Whole Process of E-commerce Security Management System,
Advanced Studies in E-Commerce, https://doi.org/10.1007/978-981-19-9458-6_1
