Comparative Analysis of Information Security Methods in E-Commerce Environment

Abstract

The rapid growth of e-commerce presents new challenges in information security, including risks of sensitive data theft, online fraud, and cyber-attacks with significant financial repercussions. This systematic literature review (SLR) analyzes and compares information security techniques and strategies employed by e-commerce companies, including SSL/TLS encryption protocols, firewalls, intrusion detection systems (IDS), regular security updates, employee training, AI-based security technologies, and collaboration with external parties. The findings indicate that SSL/TLS encryption effectively prevents man-in-the-middle attacks, with implementation costs classified as low to medium, making it accessible to small and medium-sized enterprises. This protocol ensures data integrity and confidentiality, establishing it as a foundational choice for securing online transactions. AI-based technologies enhance real-time threat detection with up to 85% accuracy and reduce response times. Intrusion detection systems integrated with machine learning improve anomaly detection but require robust computational infrastructure. Employee training programs demonstrated a 40% increase in phishing-detection rates, underscoring the value of targeted education in fostering security awareness. Regular security updates and employee training are emphasized as cost-effective solutions that sustain system resilience. Security updates promptly address vulnerabilities, while employee training promotes a culture of security awareness, empowering staff to identify and respond to potential threats. Collaborative efforts with external parties, including cybersecurity firms, further enhance the security posture of e-commerce companies. This study provides a comprehensive overview of security strategies that enable e-commerce companies to implement layered defenses against cyber threats.