Volumes have already been written on this issue facing any ECommerce initiative. The team knew that it had to come up with a security solution that would support future implementations. Therefore, it was decided that the business domains would have to be separated from the public network. The DMZ is crucial to the security of the entire network. It provides multi-layer security by protecting and separating the Internet from the Intranet zone.
Data passing in http secured socket layer uses encryption to secure the data.
The encryption in use is 128-bit. The security environment also supports services that prevent denial of service attacks and also send out alerts if any pattern mismatch is identified. Continual and regular audits are done at the Internet Information Server log level and the SQL database level to ensure that the security of sensitive data has not been compromised. The solution uses SQL authentication to separately audit all database activity. Separate roles are set for user applications and access to objects is allowed according to these roles.