E-Commerce

Electronic learning (or E-learning) is a type of technology that used to support a learning process. Malaysian Universities have given the sense that they are committed to e-learning as a teaching method. Students are required to participate in an Online Forum using Learning Management System and discussed among each others and with their tutors on their subject matters or assignment. The commitment of Malaysian Universities has ensured that e-learning technologies have become a permanent feature of the tertiary sector in Malaysia.

There are some pros when using e-learning compared to traditional face-to-face courses and lectures. Students can learn at their own place, study at their convenience and get desired resources anywhere as long as they can access to a computer and Internet connection. It can also reduce travel time and costs for off-campus student and no additional travel costs to add to their family budget. Besides, e-learning also encourage more interaction among students and instructors than in large lecture rooms and students can have flexibility in joining discussions in the bulletin board threaded discussion areas at any hour, or visit with others and instructors distantly in chat rooms.

Although e-learning offer some advantages, it also provides some cons as well. Without routine structures of a traditional class, students may get lost or confused about course activities such as deadlines for their assignments. Besides, instructor may not always be available when their students are studying or need their helps. More important is that low motivation or bad study habits will fall behind students especially for students with beginner-level computer skills.

The pros and cons of e-learning vary depending on the main target group for whom the e-courses were designed in the first place. But it is unarguable that e-learning is rapidly growing as a form of training delivery and most are finding that clear benefits to e-learning will guarantee it in their overall learning strategy.

Related links:
http://eprints.utm.my/4507/1/A_Comparative_Study_of_E_Learning_at_Malaysian_Private_Universities.pdf
http://www.about-elearning.com/e-learning-advantages-and-disadvantages.html

Mobile Payment System is a new payment method where we can make payment using mobile devices (e.g. Cell phone) instead of with cash, credit cards or cheques. Mobile payments provide quite a number of advantages for its users such as:
1. Security - Two-factor authentication between merchant and buyers to prevent fraud.
2. Convenience - Consumers need not to hold huge amount of cash during shopping
3. Easy & Fast - Buyers only need to integrate their mobile phone to the device and transaction can be done in short time

In Malaysia, mobile payments are being used in various areas:
- Music, Videos, Online Games and other Digital Products
- Transportation Fares and Toll Fees
- Books, Magazines, Tickets and other Hard Goods
- Make payment for phone bills. e.g. Digi

One of the famous Mobile Payments applications in Malaysia is Mobile Money. It provides convenience to buyers where they can buy product online and make payment without having to present at a physical store. Registered users can pay for merchandises bought by only sending a 6-digit security PIN via SMS using a mobile phone.


Besides that, Visa payWave is another example that provides mobile payment services. Technology used is Near Field Communication (NFC), a short range wireless technology that allows communication between devices at close range. Users only need to get their mobile phone close to a tiny computer chip which sends payment information to a card reader via short-range radio frequency waves. The San Francisco Coffee outlet at KLCC is an example that uses Visa payWave.

Prepaid cash card is similar to debit card, with a card number, signature and company branding. It enables holder to purchase and make payment using an amount preloaded by the holder or someone else. However, it is not like debit card services which links to a bank account with an overdraft facility. Prepaid cash card users are only allowed to use the credit preloaded by them.

It is convenience to keep and use. Users can use it as a substitute for cheques and cash. For example, if prepaid cash card is a MasterCard, VISA or Maestro card, users can use it to make purchases anywhere around the world where those cards are accepted and it is more secure as it can be blocked if it’s lost or stolen.

Users are allowed to use prepaid cash card to buy things at shops, or for telephone shopping, mail order shopping or Internet shopping. Moreover, there are some other prepaid cards such as Touch ‘n Go (TnG) smart card. Users of TnG can use their preloaded cards to pay for highway tolls, Light Rail Transit(LRT) or bus tickets and even car park fees.

Next, Octopus card used in Hong Kong is also one of the examples of prepaid cash cards. This is a smart card that used to transfer electronic payment in online or offline systems. Users can use it for public transport in Hong Kong, payment at supermarkets, convenience stores, on-street parking meters, car parks, fast-food restaurant, and other point-of-sale.

Users of prepaid cards are free from debts as they have no chance to spend exceeding the preloaded amount. This is different from credit cards which require repayments after purchases. Debts are easy to create as credit card users can exceed budget easily.

Besides that, there is no interest charged onprepaid cash cards and it is easy to apply because no credits check is needed. It helps users to control and limit their money spending. They can only spend with the money that is loaded onto the card and spending can be checked via the Internet.

Prepaid cash cards have brought many benefits. People should be encouraged to utilize it in making their purchase transactions.

Images:

(Master Card and VISA Card)

(Touch 'n Go Card)

(Octopus Card)

Related Link:
http://www.moneysupermarket.com/c/prepaid-cards/guide/
http://www.mastercard.com/uk/personal/en/findacard/prepaidcard/forbusiness/docs/PrepaidLRES.pdf http://www.creditorweb.com/definition/cash-cards.html
http://en.wikipedia.org/wiki/Octopus_Card

1. Accidental actions
This category encompasses problems arising from basic lack of knowledge about online security concepts and includes issues such as poor password choices, accidental or erroneous business transactions, accidental disclosure, and erroneous or outdated software.
Related problems occur as a result of misconfigured security products and information leakage resulting from insecure information transfers.

2.Malicious attacks

• Attack that specifically aims harm computers.
• Types of Malicious attacks:

a.Computer Virus:

-It is the most common form of malicious code.
-It is a program that attaches itself to other program.
-Major types of virus:
i. File Infectors
ii. System or boot-record infectors
iii. Macro Viruses
iv. Multi-part

-Example of computer virus:
I.
“Melissa” virus/worm - It will cause computer show down and face frequent failure.
II.
“I Love You” virus - A small piece of code attached to electronic mail which will cause an e-mail send to everyone in an address book, then damaging victims' machines.

III.Trojan horse - Personal information will be stolen as Trojan track into the computer.


b.Denial of Service Attacks (DoS)

• It is an attack on a web site that uses specialized software to send a flood of data packets to the target computer with the intention of overloading its resources and cause the network shut down.

c.Distributed denial-of-service attack (DDoS)

• A DoS attacks that gains illegal administrative access to as many computers on the internet as possible and uses these multiple computers to send a flood of data pockets to the target computer.

3.Online fraud

• It is a broad term covering Internet transactions that involve falsified information.
• Types of Online fraud:

a.Identity Theft

-Electronic commerce information can be intercepted as a result of vulnerabilities in computer security. Thieves can then take information such as credit card numbers and misuse on it.

b.Data Theft

-A term used to describe not only the theft of information but also unauthorized perusal or manipulation of private data.

• Use and update anti-virus software, anti spyware software and firewall frequently.
• Be aware of email attachments from unknown sources.
• Develop a strong password and change them frequently.
• Do not download free software unless you have verified that it is legitimate.
• Stay away from 'questionable' websites.
• Be cautious of pop-ups.
• Back up your data frequently.
• Always delete cookies in the computer to prevent track on the history/password.
  

In conclusion, we should prepare well before online to secure us being threat of online security.

Related Links: http://www.bsagovernment.com/downloads/MajorOnlineThreats.pdf http://www.vermontpcsolutions.com/articles/10-free-ways-to-help-prevent-malware-threats.html

3rd party certification program is used to ensure that the original content of an electronic document is safeguarded from being changed by unauthorized person. Certificate Authorities (CAs) are third parties that issue digital certificates which used to authenticate websites, individuals and software companies.



MSC Trustgate is a licensed Certification Authority (CA) in Malaysia since 1999. They offer security solutions that are needed by individuals, enterprises, government, and e-commerce service providers using digital certificates, digital signatures, encryption and decryption.

It’s very important for an organization to ensure the security of their confidential data. Therefore, they can use certificates to secure their data and manage identification credentials from users and computers within and outside your organization. Examples of the certificates are:

Public Key Infrastructure (PKI)
PKI is a combination of software, encryption technologies, processes and services which safeguard communications and business transaction. It is done by exchanging digital certificates between authenticated users and trusted resources. By using PKI, an organization can achieve its objective of Confidentiality, Integrity, Authenticity and Non-repudiation of data.

Digital ID
Everyday, there are millions of transactions being carried out over the unsecured network. These transactions normally contain information such as customer’s details, company’s pricing decision and other highly confidential information. Such information can be easily altered if not properly encrypted. Examples of Digital ID are CryptoSuite and Secured E-mail.

Therefore, Digital ID provides protection to this information so that such information remains private in its transferring process by signing and encrypting transaction. It uses private key and public key performs following operations that supplement PKI:

Authentication

• Verification of real identity of an individual, computer, computer program & E-Commerce websites.

• Assurance of confidential data remains private

Authorization

• Assurance that only authorized users have rights access to private data

Integrity

• Assurance that stored data have not been amended without authorization

Non-repudiation

• Assurance that online users cannot falsely deny or repudiate their transaction
  
  

VeriSign



Furthermore, VeriSign is also one of the programs used by organization in Malaysia. MSC Trustgate is the first company in Asia which appointed as VeriSign Authorized Training Centre. VeriSign provides various types of security products such as digital certificates, payment processing, managed firewalls to mobile call roaming, toll free call database queries and downloadable digital content for mobile devices.


MyKey



Besides Organization, Malaysian Government is also applying 3rd party certification program in National Identity Card (MyKad) of every citizen. MyKey is the PKI solution that works with our MyKad which allows us to conduct several Internet activities such as online submission of tax return, online banking and digitally sign documents.