Ultimately, however, data attacks
happen. The ultimate countermeasure is to not store credit card
data at all. We will see later in the book that with the new identity
management techniques, this is not only possible, but it is
actually easier than storing sensitive information such as credit
card data.
The SQL injection
attack tricks a website
into treating
data as code,
allowing the execution
of malicious
logic
Entire databases
can be stolen at
once
The Advent of Pro?¬?table Digital Crime 27
A Business on the Rise
We have seen how from its very beginning the information technology
market offered great chances of illicit gains. The ?¬?rst
phases incubated the technologies and the attack techniques
that are popular still today; the advent of widespread connectivity
on one side promoted exponential growth of the value accessible
from a computer, while on the other it acted like steroids
on the same attacks, boosting their effectiveness and pro?¬?tability.
Although the software piracy market is far from being dead,
identity and personal resources are the valuables being preyed
upon today (see Figure 1-3).
The enthusiasm (and the revenues) for the newly available
goods and services is tempered by the consumer??™s fears and
insecurity.
Pages:
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71