Conceptualizing and Implementing an Information Security Strategy for Internet Billing Systems

The decentralized nature of Internet billing systems demands a careful evaluation of the pantheon of security issues in order to avoid the potential occurrence of business risks that could not be easily mitigated. Understanding that Internet security is not merely a local technology issue implemented at each one of the endpoints of the interorganizational application, this paper presents an integrated approach based on a rigorous multi–level and multi– dimensional framework. Through synthesis, the framework evaluates and uses the available tools and techniques in a consistent manner, aiming to aid the implementation of the most effective security strategy possible. Its use and applicability is demonstrated over ‘Billing Mall’ – an Internet billing system currently being developed for the Hellenic Telecommunications Organization (OTE). Keywords—Network security, cryptography, information security strategy, Internet billing systems, electronic com-