Comodo Certificate Hack: Risks and Proposed Solutions for Online Transactions

Running head: COMODO CERTIFICATE HACK
COMODO CERTIFICATE HACK
Name of the University
Name of the student
Student number
Author Note

1COMODO CERTIFICATE HACK
Executive summary
In the following assignment, the effect of Comodo Certificate Fraud Hack on a particular
organization has been taken as the prime scenario. The Comodo certificate has been
researched in detail and the risks that the hack poses on the small and medium sized
enterprises dealing with online transactions has been assessed. The technical report contains a
brief introduction about the topic and the investigation aims. The body of the report contains
an introduction of the security problem, the issues that it poses for the organization and the
proposed solution to mitigate or reduce the issues as discussed. In the conclusion section, a
summary of the report has been provided and the importance of the proposed solution has
been assessed. In the recommendations section, a list of steps have been proposed that needs
to be undertaken by the chosen company. The proposed solution for the discussed security
problem has been assessed and evaluated to provide a well justified, feasible and cost
effective solution to maintain the security integrity of the company.

2COMODO CERTIFICATE HACK
Table of Contents
Introduction................................................................................................................................3
Body...........................................................................................................................................3
About the chosen organization...............................................................................................3
Reason for concern.................................................................................................................3
Security risks that the company can face...............................................................................4
Other major security issues....................................................................................................5
Proposed solution...................................................................................................................6
Conclusion..................................................................................................................................8
Recommendations......................................................................................................................8
References................................................................................................................................10

3COMODO CERTIFICATE HACK
Introduction
In the following assignment, a technical report about a particular organization has
been provided regarding the Comodo certificate fraud hack. The chosen organization which
has been assessed in the assignment has been chosen as a medium sized organisation which
deals with commercial transactions electronically. The name of the organization that has been
chosen is Dotti and employs approximately 100 people. The security risks that the certificate
hack has over the mentioned organization has been assessed conclusively and a well justified,
feasible and cost effective solution has been provided to maintain the integrity of the security
network.
Body
About the chosen organization
Dotti is a fashion online retail store that conducts its business through the internet for
commercial transactions. The medium sized organization was founded more than a decade
ago but recently after the acquisition by The Just Group the company has expanded
extensively throughout New Zealand and Australia. The company launched its online store
in 2012 and plans to conquer the fashion industry of Australia within a span of 10 years
(Dotti Online Shop 2018). The company deals with a number of fashion items such as
dresses, tops, jackets, bottoms, shoes and other accessories.
Reason for concern
Every company including Dotti has to use a digital certificate to identify who is
initiating the transaction and associate it with the public key. The certificate is then associated