Web vulnerability study of online pharmacy sites
Autor: | Joanne Kuzma |
---|---|
Rok vydání: | 2011 |
Předmět: |
Nursing (miscellaneous)
Computer science Vulnerability Information Storage and Retrieval Health Informatics computer.software_genre Drug Prescriptions Security Measures World Wide Web User-Computer Interface Software Health Information Management Artificial Intelligence Humans Web application Full disclosure Software analysis pattern Computer Security Internet T1 business.industry Web application security Pharmaceutical Preparations Scripting language Pharmaceutical Services business computer Secure coding |
Zdroj: | Informatics for Health and Social Care. 36:20-34 |
ISSN: | 1753-8165 1753-8157 |
DOI: | 10.3109/17538157.2010.520418 |
Popis: | Consumers are increasingly using online pharmacies, but these sites may not provide an adequate level of security with the consumers’ personal data. There is a gap in this research addressing the problems of security vulnerabilities in this industry. The objective is to identify the level of web application security vulnerabilities in online pharmacies and the common types of flaws, thus expanding on prior studies. Technical, managerial and legal recommendations on how to mitigate security issues are presented. The proposed four-step method first consists of choosing an online testing tool. The next steps involve choosing a list of 60 online pharmacy sites to test, and then running the software analysis to compile a list of flaws. Finally, an in-depth analysis is performed on the types of web application vulnerabilities. The majority of sites had serious vulnerabilities, with the majority of flaws being cross-site scripting or old versions of software that have not been updated. A method is proposed for the securing of web pharmacy sites, using a multi-phased approach of technical and managerial techniques together with a thorough understanding of national legal requirements for securing systems. |
Databáze: | OpenAIRE |
Externí odkaz: | |
Nepřihlášeným uživatelům se plný text nezobrazuje | K zobrazení výsledku je třeba se přihlásit. |