Abu Bakar's Blog

Exercise # 24

2009-06-01T20:49:00.002+10:00

Virtual Business Worlds and Cyberagents:

There are several sites which makes use of "Software Agents" for business. One example of such a site is "http://ebay.com". At the bottom of the page for the transaction of the product, there are always suggestions of the other products which some other customers have also bought and which are similar to the one, the customer had looked at or bought.

1: There are different types of software agents.Some examples are as under:

i: Cooperative agents: They communicate with other agents and act according to the results of that communication.

ii: Proactive agents: These agents initiate actions without user prompting.

iii: Adaptive agents: These agents learn from past, change, how they behave in given situation.

iv: Personal agents: They are proactive and serve individual users.

v: Collaborative agents: These agents are proactive and cooperate with other agents. 1

2: There are many software agents in action which make use of Artificial Intelligence in their operation. Artificial Intelligence Agent is defined as an agent which has got some intelligence, e.g. autonomous programs used for operator assistance programs or data mining are also "intelligent Agents". There are other ways as well where AI is used in software agents. Some examples are:

i: Simple reflex agents: They function on the "condition-action" rule, if condition then action rule.

ii: Model-based reflex agents: This agent keeps track of the current state of the world using an internal model. It then chooses an action in the same way as the reflex agent.

There are other examples as well:

a: Goal based agents

b: Utility based agents.

c: Learning agents.

d: Decision agents.

e: Input Agents.

f: Processing Agents etc. 2

Statistical techniques are being used to develop software agents which can take certain decision on the basis of data analysis available to them. There is research and to some extent success in building software agents with natural language capabilities. These take decisions on the analysis of data put to them through natural language and then reacting in natural language as well. They are also being developed to balance a network's throughput.

3: Software agents are being used in various activities in e-commerce. They are used to offer customers relative products to their searches like e-bay, amazon and many other websites do. These are also used to collect data from the customer of a website or visitors to analyse their behaviours of purchases or searches and to offer them more relevant products in future.

References:

1: Intelligent software agents-an overview accessed on May 28, 2009 at http://www.peterindia.net/SoftwareAgentsView.html

2: Intelligent agents accessed May 28, 2009 at http://en.wikipedia.org/wiki/Intelligent_agent.

Exercise # 23

2009-06-01T20:10:00.003+10:00

Searching Mechanisms

1: Spider:

A web spider is a computer program that browses the worldwide web in a methodical automated manner. Other terms for web spider are ants, automatic indexers, bots, and worms or web crawlers, web robots etc. Many sites, especially search engines like Google, Yahoo, Livesearch etc use spidering as a means of providing up to date data. 1

2: Metasearch Engine:

A metasearch engine queries several search engines simultaneously (such as Google, Yahoo, MSN etc) and displays the relevant results from the various search engines all on one page.

Following are some examples of meta search engines:

i: http://www.mamma.com

ii: http://www.scour.com

iii: http://www.digforit.com

iv: http://www.kartoo.com

v: http://www.surfwax.com

3: Search engine Optimization:

There are different ways getting one's website listed on the major search engines like Google, MSN, Yahoo etc. There are three ways of getting listed as well as paid methods. With Goolge, getting a free listing is a bit tricky. One need to have links form other sites to their site so that crawler of the search engine lists the site. The same is the case with Yahoo. But Yahoo has also got a free form for listing a website in its search results. MSN uses its own MSN BOT to crawl the web and will include a website if it has links through other websites. In order to improve ranking of a website, one needs to be extra sensitive and detailed to the content of the website. Secondly, meta tags are very important because the search engine robots look for those meta tags. So, put them on every page for some search engines. Always use heading tags, bolding and Italicizing in the content, but don't overdo it. Try to get good sites linking to your website. The more links you can get, the higher ranking will be achieved in major search engines. Search engines can't read images so use "alt" text descriptive in your code. These are some important strategies to improve ranking on any search engine. 2

References:

1: Web crawler, accessed on May 28, 2009 at http://en.wikipedia.org/wiki/web-spider.

2: Search engine optimization and submission strategies-a beginner's guide, accessed on May 28, 2009 at http://www.tamingthebeast.net/articles2/search-engine-optimization.htm

Exercise # 22

2009-06-01T19:51:00.002+10:00

Differentiation between CRM, B2B e-commerce programmes and Supply Chain Management (SCM) Software:

CRM software help organizations implement effective customer relationship management. CRM itself is not a software application, but is instead a strategy for doing business. CRM methodologies are focused on building individual customer relationships for the purpose of creating and maintaining a loyal customer base. CRM software woks across all corporate departments to help harmonise customer-centric thinking in the entire organization. This interdepartmental cooperation also reduces cost, increase efficiency, and improves customer satisfaction. 1

B2B (Business to Business) describes any business that sells products or provides to another business. B2B software enables companies to manage the integration and automation of business processes with key suppliers-partners, and customers via the internet. 2

And, Lastly, Supply Chain Management Software (SCMS) is a business term which refers to a range of software tools or modules used in executing supply chain transactions, managing supplier relationships and controlling associated business processes. While functionality in such systems can be broad-it commonly includes:

1: Customer requirement processing.

2: Purchase order processing.

3: Inventory Management.

4: Goods receipt and warehouse management.

5: Supplier management/sourcing. 3

References:

1: What is CRM Software? Accessed May 28, 2009 at http://www.tech-faq.com/crm-software.shtml

2: B2B-Business to Business integration Software, accessed May 28, 2009, at http://www.iwaysoftware.com/b2b-business-to-business-software.html

3: Supply Chain Management Software accessed May 28, 2009 at http://en.wikipedia.org/wiki/Supply_chain_management_software

Exercise # 21

2009-06-01T19:33:00.002+10:00

Shopping Cart Specification

Exercise # 20

2009-06-01T18:12:00.014+10:00

(1): Use Case Diagrams in UML:

UML uses the case diagrams to overview the requirements for the system. They are useful for presentation to management and/or Project stakeholders. Use case diagram depict:

i: Use cases=a use case describes a sequence of actions that provides something of measurable value to an actor and is drawn as a horizontal ellipse.

ii: Actors= an actor is a person, organization or external system that plays a role in one or more interactions with your system. Actors are drawn as stick figures.

iii: Associations= associations between actors and use cases are drawn by solid lines.

iv: System boundary boxes= A rectangle can be drawn around the use cases called the system boundary box, to indicate the scope of the system.

v: Packages= Packages are UML constructs that enable to organize model elements (such as use cases) into groups. 1

(2): Class Diagrams in UML:

Class diagrams are widely used to describe the type of objects in a system and their relationships. Class diagrams model class structure and contents using design elements such as classes, packages and objects. Class diagrams describe three different perspectives when designing a system, conceptual, specification and implementation. Classes are composed of three things: a name, attributes and operations.

Class diagrams also display relationships such as containment, inheritance, associations and others

Another relationship in class diagram is generalization. A generalization is used when two classes are similar, but have some differences. 2

(3): Sequence Diagrams in UML:

A sequence diagram is made up of objects and messages. Objects are represented exactly as rectangles with the underlined class name within the rectangle.. The primary element involved in a sequence diagram is an object-instance of a class A sequence diagram consists of sequences of interaction among different objects over a period of time. The other object in sequence diagram is represented as message. A message is denoted by a directed arrow. 3

(4): Collaboration Diagrams in UML:

The elements of a collaboration (Communication Diagram in UML 2.0) are essentially the same as that of a sequence diagram. A sophisticated modelling tool can easily convert a collaboration diagram into sequence diagram and vice versa. There are following elements in the collaboration diagram:

i: Objects: Objects interact with each other in the system. Depicted by a rectangle with the name of the object in it preceded by a colon and underlined.

ii: Relation/Association: A link connecting the associating objects.

iii: Messages: An arrow pointing from the commencing object to the destination object shows the interaction between the objects. 4

(5): State Chart Diagrams in UML:

A UML state chart diagrams depict the various states that a class can be in and the transaction between those states. Not each class can have state chart diagrams but only classes with three or more potential states can be modelled. 5

(6): Activity Diagrams in UML:

Activity diagrams represent the business and operational workflow of a system. An activity diagram is a dynamic diagram that shows the activity and the event that causes the object to eb in the particular state. An activity diagram consists of the following behavioural elements.

i: Initial activity.

ii: Activity.

iii: Decisions.

iv: Signal.

v: Concurrent activities.

vi: Final activity. 6

(7): Component Diagrams in UML:

The main purpose of component diagram is to show the structural relationships between the components of a system. Component diagrams offer system architect a natural format to begin medalling a solution. Component diagrams allow an architect to verify that a syatem's functionality is being implemented by components. In addition, component diagrams are useful communication tool for presentation to key project stakeholders. 7

(8): Deployment Diagrams in UML:

The deployment diagram shows how a system will be physically deployed in the hardware environment. Its purpose is to show where the different components of the system will physically run and how they will communicate with each other. 8

A deployment diagram consists of the following elements:

i: Node=The element that provides the execution environment for the components of the system. They are depicted by the queue with the name of the object in it, preceded by a colon and an underline.

ii: Connection= They define the interconnection between the nodes e.g. arrows and lines. 9

References:

1: UML 2 case diagrams accessed on May 28, 2009 at http://www.agilemodeling.com/artifacts/useCaseDiagrams.htm

2: Class diagrams, accessed on May 28, 2009 from http://atlas.kennesaw.edu/~dbraun/csis4650/A&B/UML_tutorial/class.htm

3: http://www.developer.com/design/article.php/3080941

4: Collaboration diagrams in UML, accessed on May 28, 2009 from http://developer.com/design/article.php/10925_3102981

5: UML basics an introduction to the unified modelling language_state chart diagram accessed on May 28, 2009 from http://www.ibm.com/developerworks/rational/library/769.html

6: Activity diagram in UML accessed on May 28, 2009 at http://www.developer.com/design/article/php/10925_2247041

7: UML basics-componet diagram, accessed on May 28, 2009 at http://www.ibm.com/developerworks/rational/library/dec04/bell/

8: UML basics: an introduction to the unified modelling language, accessed May 28, 2009 at http://www.ibm.com/developerworks/rational/library/769.html

9: Deploment diagram in UML, accessed on May 28, 2009 at http://www.developer.com/design/article.php/3291941

Exercise # 19

2009-06-01T16:13:00.007+10:00

TP Monitors and Transaction Protocols

(1): ACID Properties of a Transaction:

ACID is an acronym for a set of properties of a transaction. This set of properties is Atomicity, consistency, Isolation and Durability. These ACID properties guarantee that a transaction is completed reliably. Atomicity in this regard makes sure that modification of the databaseduring a transaction is as whole of DBMS and none of it. Consistency refers to the fact that only valid data is written in database otherwise all of the transaction will be rolled back and database will be restored to a consistent state. Isolation is responsible to make sure that multiple transactions do not impact eachother. Durability is the characteristic which makes the transaction permanent and is not lost because of any failure of software and hardware.

(2): TP Monitor:

TP Monitor is a control program that manages the transfer of data between multiple local and remote terminals and application programs that serve them. It may also include programs that format the terminal screens and validate the data entered. TP Monitor stand for teleprocessing monitor or transaction processing monitor. 1

It prevents an operating system from overwhelming. TP Monitor through following steps used to balance the load between the clients and various application servers and database servers. It can be placed on a separate machine. TP Monitor load balances in a system by forwarding a transaction to any of the several servers.

(3): Load Balancing Differences Between MOM, RPC, Conversations:

MOM stands for Message Oriented Middleware. MOM load balances by supporting client/server. Processes using asynchronous, peer to peer messages. A MOM does not require continuous active communication between the client and the server. A client sends the message and does not wait for a response. If a server is busy or unavailable, received messages Wait in a queue until they are satisfied. MOM solutions are well suited for events driven and object oriented applications. 2

In traditional MOM, the request by the calling object and the response from the receiving object based middleware. In contrast transactional messaging used are process for sending the message and a separate process for receiving a response to the message. 3

RPC stands for Remote Procedure Cell. It supports synchronous, call/wait process to process communications. In using RPC a client requests a service and then waits for a response. As a result, an RPC requires continuous, active participation form the server and the client. Each RRC request is a synchronous interaction between exactly one client and one server. This is called Request-Response Messaging (RRC). In a synchronous RPC, the system is almost the same except that a synchronous uses two calls to complete the request response as oppose to two messages in request response RPC. 4

(4): Two-Phase Commit Protocol vs One-Phase Atomic Commit Protocol:

The two phase commit protocol is better from one phase atomic commit protocol in that. two phase protocol allows all nodes in a distributed system to agree to commit to a transaction. two phase CP results in either all nodes committing the transaction or aborting, even if the network or node fails. in one phase Atomic Commit Protocol, No one server can decide to abort a transaction will fail if one server discovers a deadlock or it is crashed. 5

References:

1: TP Monitor, accessed by me on May 208, 2009 at http://www.pcmag.com/encyclopedia_term/o_2542_t=TP+monitor&i=53022,00.asp

2: The internet encyclopedia-volume 1, Hossein Bidgoli, John Wiley & sons, November 2003, Page 198.

3 & 4: Business Process Management-Strategy and Implementation, James F.Chang, Auerbach Publications, 2006, Page 89 & 92.

5: http://www.cse.chalmers.se/edu/course/TDA297/2008/slides/DistributedTransactions-Lec5.ppt

Exercise # 18

2009-06-01T16:01:00.003+10:00

Threading Demonstration in Python

My understanding of this code and output is as follows. This code runs different tasks. These tasks are kept tacked with the variable "running" which starts from 1 to 9. At one time only 3 tasks run concurrently which are managed by the "Semaphore" with the value of 3. Mutex is responsible for creating a buffer so that there is no deadlock during execution of the code. The time function makes a task run for a certain length of time and then the next task start executing. So in this code, all 10 tasks complete one after the other

Exercise # 17

2009-06-01T15:11:00.007+10:00

Concurrency Terms

(1): Thread Synchronisation:

In a multi threaded programming environment, it is very important to avoid conflict between different threads accessing or single variable or source. For example if we have got two threads in our application, one for reading a file contents and other to write contents to a file. If both of them try to access the file at the same time, the file/application will be corrupted. In this situation, we would lock the access to the file. 1

Thread synchronisation refers to the act of shielding against multithreading issues such as data-races, deadlocks, starvation. 2

2: Locks:

Locks are mechanism of preventing more than one thread from running at the same time. The locks ensure that one thread tries to access/update a file at one time otherwise the data will become corrupt and the function of the code will be destroyed.

3: Deadlock:

A set of processes is deadlocked if each process in the set is waiting for an event that only another process in the set can cause. In a deadlock, none of the process can run, release resources, and be awakened. Deadlocks occur when process are granted exclusive access to resources. 3

4: Semaphore:

A semaphore is a variable with the value that indicates the status of a common resource. It is used to lock the resource that is being used. A process needing the resource checks the semaphore to determine the resource's status and then decides how to proceed. 4

5: Mutex (Mutual Exclusion)

A mutual exclusion object or Mutex is an object created for use in computer programs. The essential function of Mutex is to make it possible for a multiple program thread to make use of a single resource. Generally the functionality of Mutex objects is to allow this use of a single resource by creating an environment where the access to the resources continually passed back and forth between the various aspects of the program. 5

6: Thread:

A thread can be loosely defined as a separate stream of execution that takes place simultaneously with an independently of everything else that might be happening. A thread is like a classic program that starts at point A and executes until it reaches point B. It does not have an event, loop. A thread runs independently of anything else happening in the computer. Without threads, an entire program can be held up by one CPU intensive task or one infinite loop, intentional or otherwise. 6

7: Event:

An event is one of the simplest mechanisms for communication between threads. One thread signals an event and other threads wait for it. An event object manages as internal flag that can be said to true with the "SET( )" method and reset to false with the "Clear ( )" method. The "wait ( )" method blocks until the flag is true. 7

8: Waitable Timer:

A "waitable time" object is a synchronisation object whose state is set to signal when the specific due time arrives. There are two types of waitable timers that can be created: Manual-Reset and Synchronisation. A timer of either type can be a periodic timer. 8

Reference:

1: Thread synchronization mechanism in Python, accessed May 28, 2009 at http://effbot.org/zone/thread-synchonization.htm

2: Multi threading Part III: Thread synchronisation accessed May 28, 2009 at http://www.c-shapcorner.com/UploadFile/mmehta/Multithreading3/1162005045743AM/Multithreading3.aspx

3: http://cis.poly.edu/cs3224a/Slides/cs3224a%20%20Deadlocks%20three%20per%20page.pdf

4: Semaphore accessed on May 28, 2009 at http://www.webopedia.com/TERM/S/semaphore.html

5: What is Mutex, accessed on May 28, 2009 at http://www.wisegeek.com/what-is-a-mutx.htm

6: What is a thread, accessed on May 28, 2009 at http://www.cnfeaulait.org/courses/week11/03.html

7: Python Library Reference, accessed on May 28, 2009 at http://www.python.org.doc/2.5.2/lib/event-objects.html

8: Waitable time objects, accessed on May 28, 2009 at http://msdn.microsoft.com/en-us/library/ms687012(vs.85).aspx

Exercise # 16

2009-06-01T14:17:00.008+10:00

1: Visit and Survey of e-commerce website

I visited "http://amazon.com/" for my experience on an e-commerce website. Amazon is a very famous online retailer of books, electronics, computers, digital downloads and lots of other things. Amazon.com has a lot of payment method which include

i: Almost all credit cards

ii: Payment through the bank account

iii: Amazon.com gift cards

iv: Web certificates

v: Rebates

vi: Corporate accounts

vii: Reward certificates

Amazon processes all the payment information via their secure server. Hence all the information is encrypted. Also amazon.com offers A to Z guarantee on purchases made through it which is also a peace of mind. So surely, I will trust Amazon.com with my business.

2: Measures to create trust

In order to succeed and have the customer confidence to its highest level, following steps are recommended:

a: Company log should be prominently displayed

b: A short background description of the company is always helpful

c: Detailed information about products is very advisable

360 degree illustration of products will help customers decision for purchase.

d: Product guarantees, warranties, return policies should be clearly advertised.

e: FAQ's page is one of the most important pages of a website.

f: Customer feedback are very important inputs towards the company online success. So , have a system to get as much feedback as possible.

g: A contact system stating the toll free phone numbers is very important as well as email contacts.

h: Customers should be aware of terms and conditions of doing business with the company. 1

i: The company should clearly explain the methods of payment and what kind of security measures company have to protect customers personal and financial details.

Customer can verify some measures by contacting through e-mails, phone contacts, checking other customer feed backs, etc. Financial measures can be verified through the browser "Golden Padlock" if the company uses the SSL certificates. Even, the SSL certification can be checked through the issuing agency.

3: Verisign website visit

There are many solutions offered at "http://www.verisign.com" to e-commerce businesses. Some of the solutions offered as follows:

i: SSL certificates-which include SSL site PRO with EV, Secure site with EV, Secure site PRO, etc.

ii: Domain Name Services.

iii: Enterprise security services.

iv: Communication services.

v: Identity and authentication services.

vi: Code signing.

vii: Internet defence network.

viii: Content and messaging services.

4: TRUSTe website

TRUSTe website "http://www.truste.com/" offers privacy solutions to enterprise and small businesses. For businesses there are following programs and services:

i: Web privacy seal.

ii: EU Safe Harbor Seal.

iii: Email Privacy

iv: Children Privacy Seal.

v: Trusted Download Programs.

vi: International Services.

Vii: Side Reputation Services

viii: Side Services for e-commerce.

For consumers following programs and services are offered here:

i:Web Privacy Seal

ii: EU Safe Harbor Seal.

iii: Email Privacy Seal

iv: Children Privacy Seal.

5: PGP Software

I download the PGP software from "http://www.pgp.com/downloads/desktoptrial/desktoptrial2.com". I have got only one computer so did both parts on the same PC. After the installation I had to create my private key and public keys. When ever I wont send some encrypted data, I have to create a new PGP.ZIP file encrypted with either Recipient keys, Passphrase, PGP self-Decrypting Archive (Passphrase is needed), or I can "Sign Only" (No encryption Passphrase needed).

All the diagrams of the steps I took to encrypt are as under:

6: Validating Legitimate users

Some of the other tools for validating legitimate users and prevent identity theft are as under:

i: Fingerprint readers.

ii: Login/Logout processes and passwords.

iii: Biometrics (e.g. face recognition).

iv: Tokens and smart cards.

v: Eye scanning Systems.

Reference

1: 8 steps to build customer confidence for an e-commerce business, accessed May 27, 2009 at http://emoneymakingonline.com/2009/3/12/steps-build-customer-confidence-ecommerce-business/

Exercise # 15

2009-06-01T11:16:00.005+10:00

(1): FIREWALL

Firewalls make it possible to filter incoming and outgoing traffic that flows through a computer or a network. Firewalls work on the set of the "Rules" to allow the traffic in or out of a network or computer. The firewall can inspect one or more characteristics of the packets, including but not limited to the protocol type, the source or destination host address, and the source destination port. Firewall is always a good investment towards the security of personal computer or business system/systems. Firewall greatly enhances the security of a host or a network. They can be used:

- To protect and insulate the application, services and machines of your internal network from unwanted traffic coming in form the public internet.

- To limit or disable access from hosts of internal network to services of public internet.

- To support Network Address Translation (NAT), which allows internal network to use private IP addresses and share a single connection to the public internet. 1

Here are some examples of vendors who offer software and hardware firewalls:

i: http://www.checkpoint.com/products/index.html

CheckPoint offers both hardware and software firewalls named Security Gateways. Hardware solution is available under "Appliances" with firewalls and other security services into these appliances. Software solution is available under "Software Blades" solutions which are again available with built-in other security measures.

ii: http://www.cisco.com/en/US/products/ps5708/Products_Sub_Category_Home.html

CISCO is also a major security solution provider. One of the hardware solutions is "ASA5500S series" which controls access at the WAN edge or within the LAN. CISCO IOS firewall is software solution which helps control application traffic.

iii: http://www.zonealarm.com/security/en-us/compare-anti-virus-spyware-software.htm

ZoneAlarm offers software based solutions which also include other security service including Anti-spyware, anti-virus etc. The products include "Extreme Security, Internal Security Suite, Pro firewall etc".

2: Backup Policy

UPS (United Parcel Services) has a robust backup policy for the integrity and safety of its data. The data of shipments, emails, documents, invoices etc is backed-up on site at its different offices around the world, offsite, as well as selected critical data is uploaded to its regional headquarters (e.g. for Australia, Asia Pacific H/Q in Singapore) and to the main H/Q in Seatle, USA. Hard copies of certain data is also kept. This policy is rigorously enforced as the data integrity and security is very critical in this business.

3: Virus Creation Tools

There are literally hundreds of virus creation tools available at "http://vx.netlux.org/dat.vct.Shtml".

Some examples are "Invictus" VX library, $MOTHiE::sMACRO VIRUS Creator 2000, Access Macro Generator, Acid Flowing Trojan Creator, etc and many other, the catalogue for which will be very long.

It is very easy to find virus creation tools on the internet. Just put "Virus Creation Kit" in search engine like GOOGLE and lots of entries are presented. On "http://www.hackerscatalog.com/Products/Virus/index.html", there are "Virus Creation Station 5", "Virus Creator PRO CD-ROM", "Virus and Trojan Tools PRO" available to be purchased at nominal prices but these tools are sold for educational purposes. There are many other tools available at "http://www.viruslist.com/en/virusesdescribed?Chapter=153318618". There are hundreds of other links also shown after "Googling" the particular phrase.

References

1:Firewalls accesses on May 26, 2009 from Http://www.freebsd.org/doc/en/books/handbook.firwalls.html

Exercise # 14

2009-06-01T10:54:00.006+10:00

(1): COOKIES AND SECURITY

Cookies are messages that the web servers pass to the web browser when a visitor access a certain website. The browser stores each message in a small file, called "cookie.txt". When another page is requested from the same server, the browser sends the cookie back to the server. Cookie contains information about last visits to the web page, as well as any other information like users names and interests etc. 1

With the security side, cookies cannot be used to run programs and viruses on the host computer. Cookies are uniquely assigned to the visiting computer and can only be read by the server in the domain which has sent cookies to the computer. Cookies are only text files which are used to tell web server that someone has returned for a specific page.2

(2): Cookies usage can be a huge security risk. Because cookies are text files, they can be stolen by a hacker or another user of the computer and thus he/she can steal personal information relating to a particular person. Cookies are used to identify the user as these cookies are plain text files and are sent over the internet in that format, there is always a possibility of eavesdropping or stealing that file. Hence, security is compromised. 3

References:

1: http://kb.in.edu/data/agwm.html

2: privacy statement retrieved on May 26, 2009 from http://www.sitestl.org/Home/tabid/36/CTL/Privacy/Default.aspx

3: Cookies and security accessed May 26, 2009 from http://www.nczonline.net/blog/2009/5/12/cookies_and_security/

Exercise # 13

2009-05-28T22:00:00.002+10:00

Electronic Payments and Security 1

a). Experience with a Secure Web Site:

My secure payment web site experience is with my everyday banking site. I do my banking with "Westpac Bank". With this site, I have got a "Customer ID" which I need to enter before I am able to do anything with my account. Next, I need to enter my password. The password is entered with the clicks of mouse and not with the keyboard entries. This kind of password entry is more secure because the key logger software cannot catch the mouse clicks. Westpac uses the SSL Secure Server technology. Westpac also send SMS Code through the mobile phone before each significant financial transaction or certain changes to the online record with the bank. I feel very safe with my bank due to security steps which are involved with the banking, e.g. SSL Security, SMS Code, Security Threat information on the web site and through email, mobile alerts with unusual activity on the account, and non-keyboard entry of the password to access my netbanking, etc.

b). SET and SSL:

SET is a set of protocol for securing "Credit Card" transactions over the insecure networks like Internet. It is not a "Payment System" itself.
SET is a very secure in processing the credit card payment because of the layers of security which SET uses. There are three major shareholders in a SET transaction.

1. The cardholder
2. The merchant.
3. The payment gateway (Bank, Credit Union, etc.)

SET allows parties to cryptographically identify themselves to each other and exchange information securely. SET uses a blinding algorithm that, in effect, let merchants substitute a certificate for a user's credit card number. If SET is used, the merchant itself never knows the credit card number of the buyer. It will provide verified goods payment but protect customers and credit companies from fraud.1

SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all the data sent between the web server and the browser remains private and integral. SSL is an industry standard and is used by millions of web sites in the protection of their online transactions with their customers.2

In order to be able to use SSL protocol, the web server requires the use of SSL Certificate. Certificates are provided by Certification Authorities (CA) which also provides other services and products to e-businesses to aid them in being trustworthy.3

The golden padlock in the, usually, right bottom corner of the web browser is the trust symbol of the web site.

SET is a very secure and trustworthy system. But, it has not become a common popular used standard due to certain overheads over the participating entities in the transaction. These overheads are:

a). Additional client software installation, e.g e-wallet.
b). Cost and complexity to merchants to offer support and comparatively low cost and simplicity of existing SSL alternative.
c). Client side certificate distribution logistics.4

References:

1. http://en.wikipedia.org/wiki/Secure_electronic_transaction
2. http://info.ssl.com/article.aspx?id=10241
3. http://www.whichssl.com/what_is_ssl.html
4. http://en.wikipedia.org/wiki/Secure_electronic_transaction

Exercise # 12

2009-05-28T19:21:00.026+10:00

Designing for a Secure Framework

1: SET (Secure Electronic Transaction)
SET is a standard protocol for securing "Credit Card" transactions over insecure networks especially on the "Internet". SET, itself, is not a "payment system". SET is developed by "VISA" and "Master Card" with some other companies like GTE, IBM, Microsoft, Netscape, RSA and Verisign starting in 1996. SET is based on X.509 certificates with several extensions.1
SET was developed in an effort to provide secure online payments and ordering system. The other needs were to ensure the integrity of all transmitted data in this regard, provide the legitimacy of the cardholder, provide authentication to merchant for credit card payment processing through its relationship with the financial institution, to provide the best security to protect all involved parties and provide interoperability among software and networks.
SET transaction is very secure which works in the following way:
(i): Customer browses and decides to purchase.
(ii): SET sends order and payment information.
(iii): Merchant forwards payment information to the bank.
(iv): Bank checks with the issuer for payment authorization.
(v): Issuer authorises the payment.
(vi): Bank authorises the payment.
(vii): Merchant completes the order.
(viii): Merchant captures transaction.
(ix): Issuer send credit card bill to the customer. 2
SET works in a very interesting manner. SET protocol makes use of the concept of "DUAL SIGNATURE". It works like this:
(1): The cardholder takes the "Payment Information" (PI) such as card number, expiry date etc and hashes (digests) it to produce "Payment Information Message Digest" (PIMD).
(2): The cardholder digests the "Order Information" (OI) to obtain "Order Information Message Digest" (OIMD).
(3): The cardholder combines PIMD and OIMD to produce "Payment and Order Message Digest" (POMD).
(4): The cardholder encrypts the POMD with its private key. The output of this process is "Dual Signature" (DS). It is called DUAL because it has inputs coming from PI as well as OI. The cardholder now sends:
(i): OI, PIMD, and DS to merchant.
(ii): PI, OIMD, and DS to payment gateway. 3
SET is intended to become the De-facto standard of payment method. Despite its heavy publicity and investment, it is being taken very slow. In fact it has failed to get any noticeable share of the market because of the following overheads:
(i): Network effect-need to install client software (and e-wallet).
(ii): Cost and complexity to merchants to offer support and comparatively low cost and simplicity of the existing SSL based alternative.
(iii): Client side certificate distribution logistics. 4

References:
1: http://en.wikipedia.org/wiki/secure_elctronic_transaction
2: http://lyle.smn.edu/~nair/courses/7349/SET.ppt
3: http://www.indicthreads.com/1496/security-and-thread-models-secure-electronic-transaction-set-protocol/
4: http://en.wikipedia.org/wiki/secure-elctronic-transaction

RSA 128-bit Encryption

RSA is a "Public Key Encryption" technology developed by RSA Data Security Inc. The acronym stands for Rivest, Shamir and Adelman who were the inventors of this technology. RSA algorithm is based on the fact that there is no efficient way to factor very large numbers. So, in order, to crack an RSA key will require an extraordinary amount of computer processing power and time which is virtually not possible in these days by an ordinary person and computer. RSA algorithm has become the De-facto standard for industrial strength encryption, especially data sent over the internet. It is built into many software products like Microsoft Internet Explorer, Mozilla FireFox and Google Chrome web browsers as well as many other applications. 1
RSA encryption technique/function can be described as under:
(1): Key pair generation produces public/private key pair.
(2): Signature process produces a signature for a message with a private key.
(3): Verification process checks a signature with a public key. 2
RSA is the first algorithm known to be suitable for signing as well as encryption, and on of the first advances in public and is believed to be secure given sufficiently long keys and the use of up-to-date information 3. An important information of public key encryption in the realm of e-commerce is the transmission of credit card information securely to online merchants. Today, RSA encryption method is adopted in many companies softwares and products. US Department of Defence is one of the licensee of RSA encryption software.4

Reference:
1: http://e-comm.webopedia.com/TERM/R/RSA.html
2: http://www.rsa.com/rsalabs/staff/bios/bkaliski/publications/other/kaliski-rsa-signatures-nissc-2000.ppt
3: http://en-wikipedia.org/wiki/RSA
4: http://ecommerce.hostip.info/pages/914/RSA-data-security.html

2: Network & Host based Intrusion Detection Systems
All Intrusion Detection Systems take either a network or a host based approach to recognise and deflect attacks. These products look for "attack signatures", specific patterns that usually indicate malicious or suspicious intent. When an IDS looks for these patterns in network traffic, it is network based. When an IDS looks for attack signatures in log files, it is host based. A truly effective system will employ both technologies. Network IDS uses raw network packets as the data source while host-based IDS were mainly used in 1980's when networks were rare and it was common to review audit logs for suspicious activity. 1
In real world scenarios, network and host-based IDS are both needed for different benefits. Detection, deterrence, response, damage assessment, attack anticipation and prosecution support are available at different degrees from different technologies. Host-based IDS detects insider misuse while network based IDS detects outsider misuse. Network based IDS focuses more on abuse of vulnerabilities while hose based IDS focuses on abuse of privilege. On the other hand host based IDS provide poor real time response and cannot effectively against on time catastrophic events. They are excellent in detecting and responding to long term attacks, such as Data Thieving and Disgruntled employees. Network based IDS are effective at real time detection and response. They can be good at detecting long term attacks such as sniffer programmes, reporting information from outside the firewall. 2

Reference:
1: http://documents.iss.net/whitepapers/nvh_ids.pdf
2: http://infohost.nmt.edu/sfs/Students/HarleyKozushko/Papers/IntrusionDetectionPaper.pdf

3: Phishing

In the field of computer security, Phishing is the criminally fraudulent process of attempting to acquire sensitive information such as user names, passwords, bank details, credit card information by masquerading as a trustworthy entity in an electronic communication. Phishing is typically carried out by email or instant messaging. 1 Usually,the phishing emails or instant messages are sent as being a bank, credit union, any other financial institution, auction sites etc.

References:
1: http://en-wikipedia.org/wiki/phishing

Exercise # 9

2009-05-05T22:00:00.010+10:00

1. Web Form Design and Processing: A Basis for E-commerce Interaction.

a. Design The Form: Code for the form design, processing, and its result are as follows.

CODE.

RESULT FROM THE BROWSER.

Elevator Pitch # 1

2009-05-02T17:55:00.003+10:00

I just recorded a new Elevator Pitch for my Assignment # 1 and have uploaded it through EASTS and also sent through the email as well. First time, I embedded it in my Word document which I submitted for my Assignment related blog link and this mp3 file. But, it seems that didn't work and I was asked to submit it again. So, I have done it again and hopefully it is alright in its content and will fulfill the requirement for my assignment.

Exercise # 8

2009-04-19T21:01:00.034+10:00

PHP and MySQL Database Access:

1. Table Creation:

2. Web Page Creation Code:

This is the problem happening when trying to create table from the PHP code written above. I hope that somebody will be able to help.

3. add_record.html Code and its result:

4. add_record.php Code and its Result:

Having the same problem as above, I tried from command line and the result was as follows:

I need help here as well that what am I doing wrong?

Again, the problem is the same. I hope to get some feedback on this and please remember, I have no experience in programming. Thanks.

Unfortunately, my assignment is still not complete and lots of work needs to be done. So, please comment and I shall keep on working here on the rest of "Assignment # 1".

Exercise # 7

2009-04-19T20:54:00.005+10:00

1. User Input for Database Access with PHP:

2. Result of User Input:

Exercise # 6

2009-04-19T20:02:00.014+10:00

1. Some Server Practice with PHP:

a: PHP Code result with $REMOTE_ADDR.

b. PHP Code Result with $SERVER_NAME

c. Code Result with $PHP_SELF

2. Application called "hello_world.php"

Exercise # 5

2009-04-19T16:18:00.015+10:00

1. Simple Chat Client/Server System and Some Program Code:

A simple chat client/server system takes care of the incoming messages from a user on one side and delivering it to another user on the other side of the communication process. The system has a graphical user interface client program installed on the user machine. On the server side, this chat system has also got a server program code which processes all this communication between clients. Server also takes care of additional features like prioritising and handling of multi users communicating to a single client, creating connections, database services and load balancing etc.

private void listen( int port ) throws IOException {

// Create the ServerSocket

ss = new ServerSocket( port );

// Tell the world we're ready to go

System.out.println( "Listening on "+ss );

// Keep accepting connections forever

while (true) {

// Grab the next incoming connection

Socket s = ss.accept();

// Tell the world we've got it

System.out.println( "Connection from "+s );

// Create a DataOutputStream for writing data to the

// other side

DataOutputStream dout = new DataOutputStream( s.getOutputStream() );

// Save this stream so we don't need to make it again

outputStreams.put( s, dout );

// Create a new thread for this connection, and then forget

// about it

new ServerThread( this, s );

}

In order to serve multiple clients, a server side program needs to create a Socket", where each new coonection is created by a client program. For the client program, a listening port is created to accept incoming connections. The communivation between clients and server passes through scokets which is just a programming object, nothing physical. The threads are created to create new connections which deal with new connections. In our sample code, it is creating a listening port for incoming connections and at the last line, creating threads to handle multiple chat clients.

2. P2P and Grid Computing

Peer-to-Peer ia an approach to computer networking where all computers share equivalent responsibility for processing data. P2P networking (also known as peer networking) differs from client-server networking, where certain devices have responsibility for providing or "serving" data and other devices consume or otherwise act as "clients" of these devices.1

1: http://compnetworking.about.com/od/basicnetworkingfaqs/a/peer-to-peer.htm

One of the major distinguishing properties of P2P computing is its decentralized nature of network. Everything from storage, processing, information sharing etc. to control information is held in a distributed manner. P2P systems are highly scalable. In this kind of computing, the systems are highly self-organizing in a sense that the different system components work together without any central management. This type of computing is also inherently fault-tolerant.2

2: http://www.korn.e-technik.tu-darmstadt.de/publications/abstracts/MHO3-1-paper.pdf

Grid Computing:

Grid Computing is also the application of several computers to a single problem at the same time, usually to a scientific or technical problem that requires a great number of computer processing cycles or access to large amounts of data. In other words, hundresds or even thousands of computer processors are working on the same problem or question.

Grid Computing is also a distributed computing like P2P but the grids tend to be more loosely coupled, heterogeneous and geographically dispersed.1 Grid computing uses middleware to coordinate disparate IT resources across in network, allowing them to work as a Virtual Whole.

1: http://en.wikipedia.org/wiki/Grid_computing

3. JAVA & .NET Frameworks:

Both JAVA and .Net development frameworks are extensively used in the marketplace. Both of these have their own pros & cons which we are going to discuss here.

First argument is support of both of these frameworks:

a: New developers will always be needed to train.

b: Web services are built today using both platforms.

c: Both offer low system cost.

d: Both offer single vendor solution.

e: The scalability of both is theoretically unlimited.1

1: http://www.theserverside.com/tt/articles/article.tss?/=J2EE-vs.DORNET

The following table compares and contrasts both of these frameworks in well constructed manner.

Features	J2EE	.NET
Type of Technology	Standalone	Product
Middleware Vendors	30+	Microsoft
Interpreter	JRE	CLR
Dynamic Web Pages	JSP	ASP.NET
Middle-Tier Components	EJB	.NET Managed Components
Database Access	JDBC SQL/J	ADO.NET
SOAP, WSDL, UDDI	Yes	Yes
Implicit Middleware (Load Balancing, etc)	Yes	Yes

Exercise # 4

2009-04-19T13:35:00.012+10:00

1. IP Protocol and DNS:

IP (Internet Protocol) Protocol is used to more data across the network using a routing table. The critical function of IP Protocol is to look at each packet address and then to forward it to the correct machine.

Computers understand numbers (Decimal) language and cannot understand human language. So, when we use Internet, every Internet website has a decimal notation web address. It is very difficult for human to remember these decimal notion web addresses. DNS is a service, called Domain Name Service, which translates the web address like "www.gmail.com" against the decimal notation numbers that computer can understand. So when we write "www.gmail.com" DNS has got the decimal notation address against this name in its database and gets the web page from that address, so we don't have to write and remember the decimal notation numbers. The same can be true for organizational internal network.

2. TCP Protocol:

TCP is Transmission Control Protocol. The basic function of this Protocol is also to move data across the network but this protocol does it reliably. After sending data, TCP waits for an acknowledgement from the destination machine. If some error occurs, it can retransmit the data. That is why TCP is called Connection-oriented Protocol while IP is a connectionless protocol as it does not wait for acknowledgements and keeps on sending data in a sequence. TCP is related to IP in that both have the functions of moving data across a network and it also receives data/segments from upper layer where TCP Protocol resides. IP breaks up this data and then reassembles at the destination machine.

3. E-Business Applications:

a: An "Interanet" is the generic term for a collection of private computer networks within an organization and an "Extranet" is a computer newtwork that allows controlled access from the outside for specific business or educational purposes. Intranets and Extranets are communication tools designed to enable easy information sharing within workgroups.1

b: A "Web Portal" or "Public Portal" refers to a website or service that offers a broad array of resources and services, such as e-mail, forums, search engines, online shopping malls etc.2 The examples of web portals are YAHOO, MSN, AOL and iGoogle.

c: "B2B" is contemporary shorthand for long-term sales practice called " Business-to-Business". B2B transactions primarily target companies and other wholesale buyers, while transactions targeting individuals are called "B2C" or "Business-to-Customer". A large number of businesses have both "B2B" and "B2C" components, but it also not uncommon for a company to specialize in B2B services or sales.3

d: VPN is a form of computer network where the data can be sent securely via a shared or public network, also internet, between two computers, servers or between a client and a server. VPN utilizes existing telecommunication infrastructure (e.g Phone Lines, Broadband Services, Dedicated Internet Link etc).4

After looking at the definitions of all of the above different uses of technologies, the scope of building e-business applications change. Intranet and Extranet applications need less focus on the security. Extranet needs a bit more focus on the security than intranet applications because they are a collection of private intranets within an organization. On the other hand VPN needs a lot more security focus as the usage of public communication networks such as internet are used. B2B and B2C are mainly information and file sharing among the businesses and customers. These transactions need more secure shape if shopping cart is used to make a sale/purchase. So each e-business application needs to be built on the basis of its usage scope within an organization.

1: http://computernetworking.about.com/cd/filetransferprotocol/intranetsandextranets.htm

2: http://www.webopedia.com/TERM/p/portal.html

3: http://www.wisegeek.com/what-is-b2b.htm

4: http://www.cityu.edu.hk/csc/deptweb/facilities/ctnet/vpn/vpn.htm

Examples:

Intranets are not possible to access form the internet. Here are some examples of these sites from internet only.

a: Intranet Site: JWT INSIDE= Jetblue-Blue Tube

b: Extranet Site: http://www.hclib.org/extranet

c: Web Portal: http://www.yahoo.com.au/

d: B2B Site: http://whiteboard.ups.com/

e: B2c Site: http://www.amazon.com/

e: VPN Site: http://openvpn.net/

4. Virtual Private Network (VPN)

VPNs can and are playing very important role in B2B e-commerce. Access is the driving need for almost all of the businesses and security solutions. The need for B2B accesses, either for file sharing or remote access to applications, continue to grow. With increased regulations, security needs have never been more important.1 VPNs can be implemented with strong security standards to overcome these difficulties or challenges.

1: http://www.axway.com/media/pdfs/analyst-yankee_1004.pdf

Exercise # 3

2009-04-16T21:50:00.005+10:00

Steps for "Rapid Evolutionary Prototyping Approach" and relationship of REPA to Agile Development:

In REPA, the whole systems or applications are not prepared altogether rather they are created in continuous developing phases. In this method, not whole of the system or application is put in place but a prototype of the whole system or application is provided and then it is refined and developed as the requirements of the users or the business. The steps which can be involved in REPA are as follows:

1. Identinfication of User/Business needs.
2. Identification of required system or application specifications.
3. Devlopment of a prototype of the required system or application.
4. Determination of the acceptability of prototype and subsequent implementation.1

The main goal of using REPA is to build a very robust prototype in a structured manner and constantly refine it. The reason for this is that REPA, when built, forms the heart of the new system, and the improvements and further requirements will be built.2

Agile development is very closely related to REPA. Just as REPA, Agile development also requires interation, teamwork, collaboration, and process adaptibility thorough out the life-cycle of the project. Agile methods choose to do things in small increments with minimal planning, rather than long term planning. Like REPA, Agile methods also value:

1. Individuals and interactions over processes and tools.
2. Working software over comprehensive documentaion.
3. Cusomter collaboration over contract negotiation.
4. Responding to change over following a plan.3

Agile methods almost completely work as Rapid Evolutionary Prototyping Approach where the development life cycle of a project also depend upon communication, incremental development, and adopting the change as required.

References:

1. Evolutionary Prototype, Accessed April 12, 2009
http://www.shepherdmis.info/schdedule/ch13.ppt

2. Evolutionary Protoyping, Wikipedia, Accessed April 16, 2009
http://en.wikipedia.org/wiki/Evolutionart_Rapid_Development#Evolutionart_rapid_development

3. Agile Software Development, Wikipedia, Accessed April 16, 2009
http://en.wikipedia.org/wiki/Agile_development

Exercise Two

2009-04-14T21:54:00.005+10:00

Technology and the Evolution of Business Options:

Examples of Web Sites with different business option:

Online Shopping Web Sites.

1. www.ebay.com.au
2. http://www.topbuys.com.au/
3. http://www.amazon.com/
4. www.multipower.com.au
5. www.scholastic.com.au

Electronic Payment offering Web Sites.

1. www.securepay.com.au
2. www.paypal.com
3. http://www.paymate.com/
4. www.camtech.com.au
5. http://checkout.google.com/

Database Access Sites.

1. www.gpoaccess.gov
2. http://www.ancestry.com.au/
3. http://www.sourceforge.net/
4. http://www.slv.vic.goc.au/ (State Library of Victoria)
5. http://www.autobarn.com.au/

WAP Sites.

1. http://m.cnet.com/
2. http://wap.mapquest.com/
3. http://m.reference.com/d/
4. http://m.live.com/
5. http://wap.accuweather.com/

Exercise One

2009-03-25T21:57:00.009+11:00

Analysis of the Online Communities Paradigm:

1 -

A =

"A Virtual Community, E_Community, or Online Community is a group of people that primarily interact via communication media such as Newsletters, Telephone, Email, Internet Social Network Service or Instant Messaging rather than face to face, for social, professional, or other purposes. If computers are involved in all this interaction then it is called as Online Community." (Wikidpedia entry: Accessed 18/03/2009)1
Online Communities play a very important role in the expansion and understanding of E_commerce. People who are members of these communities receive regular emails regarding products and services. These communities also distribute price comparisons, product or service features, usage instructions, and importantly experiences of other members with the product or the service. This is a very important role of Online/Virtual communities that they become a medium of interaction for the organizations, business, and corporations with a huge number of potential clients with relatively very low costs and huge potential for growth.

1 - Reference: http://en.wikipedia.org/wiki/Online_communities "and" Tuomi, Ilkka Internet, Innovation and Open Source: Actors in the Network 2000 First Monday

B =
i) While visting three web sites http://www.ebay.com/, http://www.ebay.com.au/, and http://www.ebay.com.au/, it is very evident that there are many common threads under the Category of Community. These threads include are News, Answer Centre, Workshops/Discussion Forums, Neighbourhoods, and Groups. These are all kind of community services which are provided to the Ebay community for their information and any other purpose of benefit for the Ebay community.
ii) Main Electronic Payment system used on Ebay is PayPal. There are other systems of payment as well like Visa, MasterCard, Diner Club Cards, Amex Cards, Direct Bank Funds Transfers, and services like Western Union and Money Gram are also offered by some sellers. The preferred method of payment by Ebay is PayPal and their is some Insurance Protection of upto US$3000 (depending on the status of the seller in the Ebay system) also available. All the other methods are used on buyers own risk. PayPal and CreditCard payment methods are globally acceptable. CreditCards can also be used through PayPal so this is the best method to be used while using Ebay.
iii) There are benefits to all buyers, sellers, and Ebay owners. Buyers do not need to travel a lot in order to get a bargain. Buyers can explore all of the site for their required merchandise, check prices from different sellers (hundreds in many cases), chech all the details regarding the product/service, and then decide whether to buy that or not. It is great benefit to buyer, no need to travel, get a lot of details about the product and its condition, further exploration about the feature and pricing can be done out of the Ebay community as well, and then decide from which seller to buy the product, and on top of that majority of sellers also provide warranty.

C =
I have visited http://shopping.yahoo.com.au/, http://www.cisco.com/, and http://www.nike.com/ as three online businesses which use community approach in their business. All these sites offer users their personal interaction with the products, encourage consumers/users of the products to have their say and experience with the product/services, find out about the new and old products, and lots of other features for the consumers.

2.

A =
The success of http://www.amazon.com/ is maily due to the ease of use of the web site. All the products which are sold by Amazon are directly searchable from the main site. Any novice or experienced user of computer and internet can use the web site with each and can easily find whatever he/she is looking for with just few clicks. There is a lot of information available for the product to the interested customer and many alternate suggestions are also given by the site to the customer. There is a lot of previous customer's feedback available which is a great help to the customer. Customer's get good Customer Service from the site owners and any complaints or concerns are handled swiftly.
The purchase of the book starts either with a search performed by the customer or there are lots of suggestions under the Books category on the site. After that, select the required book and add it to the Shopping Cart, sign up with the site, make the payment, and the book is on its way to the customer's doorstep. This is a very simple, straightforward procedure for a customer to order a book on http://www.amazon.com.

B =
There are options of using GiftCards. These gift cards can be emailed, printed at home, or can even be sent through mail. These are the kinds of secure transaction which do not involve money on Amazon web site.

C =
There is a huge list of items which can be bought through http://www.amazon.com/. A selected or all of the list is provided under:
1. Books
2. Movies, Music, and Games
3. Computers and Office Products
4. Electronics
5. Home and Garden Products
6. Grocery, Health, and Beauty Products
7. Toys, Kids, and Bay Products
8. Apparel, Shoes, and Jewellery Products
9. Sports and Outdoor Products
10. Tool, Auto, and Industrial Products
11. Digital Download
12. Wireless Reader - Kindle

i - The steps involved in purchasing a products involve the following. The customer makes a search for the required product and selects the one interested in buying. After that, customer adds the product to the Shopping Cart and signs-up with the web site if required. During the Checkout process, customer selects the payment method and exits out of the Shopping Cart. The customer is given a reference number for the purchase and for delivery tracking purposes. It is a very simple and easy method to follow for any type of customer from novice to experienced. It is very easy to find the product, get features information of the product, read the feedback from customers, check the popularity of the product, and order it. All of this is done in couple of pages cycle on the web site and the customer is not stuck in the web site for a long time.

3 =
The price comparison web sites offer their users the prices of comparabe products available from a number of stores. The user then follows the online link of the store and makes the decision of either buying the product online from the store if store is in online business or goes to the store personally to buy the product.

Installation of RubyOnRails!

2009-03-09T17:18:00.000+11:00

I installed RoR through InstantRails2. I had to download and install MySQL separately. Both were working fine until yesterday. I have to reconfigure the Configuration Instance in SQL each time, I start InstantRails. I think that I shall have to do that every time. As long it starts fine, I am happy to do that. As I have not got any prior experience in programming, I shall be struggling a bit in this course, I think. For that, I am looking forward to all the help, I can get from everybody involved in this course. Thanks in advace.

About Me!

2009-03-09T16:49:00.000+11:00

Hi!

My name is Abu Bakar. I live in Melbourne, Victoria, Australia. I am new to blogging and publishing this blog in order to fulfill requirement for ITC-594, a subject towards the path of my Master's in Information Technology degree through Charles Sturt University.

I hope to learn a lot regarding E-commerce, E-business, E-governance, and all other E-s. I hope that this is going to be a fun process as well as learning. I don't have experience with programming but I have learnt some during my Bachelor's degree like Pascal, COBOL, Assembly, Prolog but after that no interaction with programming. So, I think programming will be a bit of challenge for me but hopefully I shall get through it. Looking forward to all the help from you all.

I shall be anxiously looking for comments from you all out there, my fellow students, and my lecturers and course coordinators etc.