It is the individual's responsibility to keep passwords safe. A more effective way of policing entry, which Reilly believes will become increasingly popular, is the use of digital certificates. It operates on the basis of something you own and something you know. The digital certificate is a small, encrypted file that is unique to its owner and is given out by the site administrators, preferably in person. Every time the user goes into the site, the administrator can check that they have this unique file, and therefore know that they are the right user.
People tend to concentrate on external security, but they have to consider both sides.
Many major security incidents come from internal sources. Some deals could be worth hundreds of millions or billions and could be share sensitive. Deri Jones, security manager of NTA Monitors, an internet security testing firm, is called in at the design stage of secure rooms to consult on security issues, or alternatively after the event, in a testing and auditing context. We flow traffic into the network and see what comes out the other side. In many ways security in any e-business environment depends on the quality of security implemented on the servers that run the virtual arena in question.