Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Security concerns cloud holiday shopping

New survey reveals consumer fears about data privacy, ID theft and online fraud
Jaikumar vijayan   Today’s Top Stories    or  Other Security Stories  
 

Sign up to receive Security Resource Alerts

November 30, 2005 (Computerworld) -- The big increase in online sales expected this holiday shopping season comes amid what appears to be unprecedented consumer concerns over data privacy, online fraud and identity theft.

The results of a new survey of 1,005 consumers released today shows that while 78% of U.S. Internet users plan on shopping online this year, more than 69% of those shoppers will limit their online purchasing because of concerns about the possible misuse of their personal information.

The survey was conducted by San Francisco-based Truste, a nonprofit privacy organization, and market research firm TNS Global in New York. It found that privacy concerns would deter more than 40% of the respondents from buying from smaller online retailers, and about 22% said they will not be purchasing online at all.

The survey was conducted online between Oct. 27 and Nov. 1.

"There's definitely a reason for both consumers and merchants to feel more concerned" about data security and privacy issues compared with previous years, said John Pescatore, an analyst at Stamford, Conn.-based Gartner Inc.
For consumers, the biggest risks come from the increasing use of keystroke logging and password acquisition tools by hackers, Pescatore said. Such remote access tools allow cyber thieves to capture sensitive information such as credit card numbers from consumers who are doing business online, he said. A Gartner study in March showed that despite a higher awareness of phishing scams, a large number of consumers continue to be fooled into visiting Web sites that download such hacker tools.

Dan Clements, founder of Cardcops.com, a Malibu, Calif.-based company that enables consumers to check for stolen credit card numbers, said that the number of stolen credit cards and pieces of personally identifiable information appears to be growing. "There is a definite underground where you can buy and sell this stuff without the threat of law enforcement," he said.

Much of the stolen information appears to have been snagged through hacks into systems containing confidential data and from phishing scams, he said.

"Almost every day we see a new merchant being hacked" and information being stolen from their systems, said Clements, whose company scours known hacker sites, chat rooms and other online locations for stolen credit cards and personally identifiable bits of data.

Over the past three years, Cardcops has alerted more than 500 merchants about data compromises resulting from potential hacks into their systems. Clements said the company has also found more than 1 million stolen credit cards and between 7 million and 10 million pieces of personally identifiable information associated with those cards, such as last names and addresses, he said.

Most of the time, the merchants involved appeared unwilling to take responsibility for their security lapses, he said. "When you show them the data, they only fess up to what is put in front of them," Clements said.

But Cathy Hotka, senior vice president of technology and business development at the Retail Industry Leaders Association in Washington, said that much of the concerns about online security is overblown.

"I don't believe for a second that anybody's enthusiasm has been dampened" by online security concerns, Hotka said. "The track record of online security is great. We've demonstrated safe e-commerce for years, and consumers love it. If anything, there's concern about phishing and the effect that it can have on brands."

The results from the Truste survey appear to reinforce the findings of other recent research that reveals similar consumer concerns.

In a nationwide survey of 1,009 consumers conducted by Forrester Custom Consumer Research for the Business Software Alliance, one in four consumers said they would not shop online because of Internet security concerns. Another survey of 2,008 consumers released on Nov. 22 by Sun Microsystems Inc. showed that 83% of the respondents think they're most susceptible to identity theft during the holiday season.




Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
"Debian, the popular Linux distribution has just been shown to have made an all-time stupid security goof-up. They managed to..." Read more...
"Houston area overrun by ants -- no, not atomic mutants. Sorry. Maybe even worse. At least you could kill Them..." Read more...
Read more Security posts or See all Blogs
HP confirms XP SP3 endless reboot snafu, promises patch
Tools circulate that crack Debian, Ubuntu keys
Former Microsoft manager offers free fix for XP SP3 'endless reboot'
More top stories...
Can Icahn take on the Yahoo board and win?
DNS trouble knocks NSA off Internet
Developers confirm, explain why they're avoiding Windows Vista
Specialists have retrieved about 99% of the data on a disk drive on board the crashed space shuttle Columbia. Don't miss the photographs of the recovered drive.
These big ideas were supposed to revolutionize technology, but they never actually appeared. In a few cases, you'll be glad they didn't.
Nearly 20 years after the first Internet worm, Steven J. Vaughan-Nichols takes stock of the malware/anti-malware landscape and spotlights how the two sides are approaching the battle.
Though some thought it was released too soon, Mac OS X 10.5 has matured into a solid operating system, says reviewer Michael DeAgonia.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Enterprise-Class Security Zone
Enterprise Solutions Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
The Data Center Management Zone

Ads by TechWords

See your link here
Long Tail Supplier Collaboration - What's In It For You?
Long Tail Supplier Collaboration - What's In It For You?
Download this webcast, free, compliments of Sterling Commerce
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Eliminate SPAM, Gain Productivity
Get this white paper now!
(Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Six Support Issues That Keep Execs Awake at Night
Spam Spikes: A Real Risk to Your Business
The New Foundation of Storage: Xiotech's Intelligent Storage Element
View more whitepapers 
Layered Security Solutions
Although basic network security issues have changed very little over the past decade, the network security landscape has changed dramatically. Today's IT professionals still have the primary responsibility of protecting the confidentiality of corporate information, preventing unauthorized access, and defending the network against attacks. Security experts and analysts agree that a security solution comprised of multiple layers is the best defense against today's increasingly sophisticated attacks.

Download this white paper 
Universal Threat Management - Because Conventional UTM is Not Enough!
This white paper, written by Mark Bouchard of Missing Link Security Services, examines the challenges confronting today's enterprises with respect to managing threats on a network. It also discusses the need for "Universal Threat Management", which is a security solution approach for all physical locations within an enterprise that require threat protection.

Download this white paper 
Selecting the Right Threat Management Solution
This short demo will guide you through key considerations for selecting a solution to manage threats on a network. Learn about the popularity of Unified Threat Management (UTM), and how it fits into an overall security solution. Explore critical elements of a network-wide solution for multisite and large network-size deployments and identify the four key features of a threat management solution.

View this demo