Website Verification

Learn about how you can make your website secure and safe for your customers

  • Website Verification Poll

  • Mybloglog

    Join My Community at MyBloglog!
  • Check out my website verification online magazine:

  • Add my blog to:

    Add to Technorati Favorites

Posts Tagged ‘vulnerability assesment’

Identity Theft Can Be Avoided With Vulnerability Assessments

Posted by websiteverification on June 26, 2009

It has been said that identity theft is the largest white collar crime ever in the United States.  As a website owner, you may wonder what you can do to protect your clients.  I am here to recommend that you should definitely have vulnerability assessments done on your website.  A vulnerability assessment is defined as the process of identifying, quantifying and prioritizing the vulnerabilities in a system.  You may have also heard of vulnerability scanning or pci scanning, it is really all basically the same thing.  And it is one of the best ways that you, as an online business owner, can protect the information of your customers.

Criminal identity theft occurs when a thieve gives another person’s name and personal information such as a drivers’ license, date of birth, or Social Security number (SSN) to obtain a job, housing, money, goods, or other services. It’s been reported by the Federal Trade Commission that in the last twelve months 9.93 million people have had some type of identity theft crime committed against them. Victims spend on average $1,200 in out-of-pocket expenses and an average of 175 hours in time and effort to resolve the many problems caused by identity thieves. The scary thing is that it takes a victim on average 12 months before they even realize they have been victimized!

So how can vulnerability assessments help? Having vulnerability scanning conducted by an approved scanning vendor yearly or even quarterly can protect your site and help keep you compliant with the PCI DSS (Payment Card Industry Data Security Standards). Merchants that accept, process or store credit card information on their site, must have the scanning conducted.  Once passing the scan they will receive the official certification that they need to submit to their acquiring bank.  You can be sure that you will avoid penalties and heavy fines, if you are conducting these scans and staying compliant.

It has been proven that merchants who are pci compliant see online orders increase. Why? Because shoppers are more confident in using their credit cards online when they know that the sites they are shopping on are more protected from the risk of identity theft.

Some areas that are tested during a vulnerability assessment are firewalls, server vulnerabilities, virtual private networking (VPN), email configuration, remote access services, web site analysis, modems, and more.

So if you own an online business, don’t take any risks.  Keep your site compliant and safe from identity thieves for the protection of your business and your customers. Start vulnerability assessments now.

Posted in pci compliance, website verification | Tagged: , , , , , , , | 1 Comment »

Vulnerability Assessments?

Posted by websiteverification on March 18, 2009

You may have heard the term “vulnerability assessment, but aren’t quite sure what it means. You are not alone. I ran into this term a few times in my research and wasn’t quite sure what to think, so I decided to find out what exactly a vulnerability assessment is, and how it relates to PCI compliance.

These days, the risk of threats on the internet has become increasingly worrisome. The rising cleverness of intruder attacks using vulnerabilities found in online networks and applications has made it crucial for businesses to assess their network on a regular basis. This is where a vulnerability assessment comes in. A vulnerability assessment works hand in hand with PCI scanning to accurately scan web applications, databases, networks, operating systems and other software to find threats and assess the risk to the business. In a nutshell, running these PCI scans (sometimes referred to as vulnerability scans) help to reveal any areas in your network that are weak or prone to attack. Then you will be able to make any changes needed to your network to ensure that your business and customers are safe.

As with anything, it is important to realize that using vulnerability scanning alone, is not entirely fail-safe. As a business, you can combine the use of vulnerability scanning along with other means of website protection to ensure the security of your business and customers. Also, you should be aware, that not all vulnerability or PCI scanners are the same, so you really should do some research and make sure that you are using an approved scanning vendor (aka ASV), that will do the best job for you.

A company that I have found to be very helpful in all my research is Trust Guard. They offer a lot of information on a vulnerability assessment and vulnerability scanning. Check it out, and ensure that your business is protected.

Posted in pci compliance, website verification | Tagged: , , , , , , , , | Leave a Comment »