Building up active-defending security assurance framework for e-commerce

Nowadays, security problem has become one of the restricted factors to develop e-commerce. The routine security means is focused on infrastructure, such as firewalls, monitoring tools, or network access controls. But e-commerce system´s insecurity problems are ascribed to the insecurity of operating system and the structure of Personal Computer (PC). This article presents an active-defending security assurance framework based on trusted computing platform for e-commerce. The security assurance framework provides the e-commerce system for integrating separate products and tools to meet current secure needs and consolidate internal and external secure requirement, it implements a higher level´s defending from the terminal operating platform and controls the insecurity factors at source.