Nf_Kicks: Technical Report
Fouad Animashaun · NORMA · 2021
Today's e-commerce applications are not designed with security in mind; the primary risks to e-commerce and customer privacy include data exposure, denial of service attacks, brute force attacks, reverse engineering, and security misconfigurations. As well, companies must adhere to regulatory requirements, such as the General Data Protection Regulation (GDPR) and the Payment Card Industry Data Security Standard while processing consumer credit card details, to ensure that customer information does not end up stolen by an attacker. These issues can start to make the cost of doing business without security built into applications prohibitively costly, which is why I decided to make this report a security evaluation that will detail how to implement proper security measures in today’s e-commerce applications by addressing the difficulties associated with developing a security-first e-commerce application, including lost productivity, sensitive data leakage, and regulatory compliance. The report will then proceed to provide answers to the issues of security in e-commerce through an analysis of the Nf_Kicks project, which will cover security features and the problems said features are addressing concerning e-commerce security.