Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 234
  • Last Modified:

let me know if this is possible??

I am not much into programming. I work as a network administrator and have the following issue.

I want to block any and every credit card transaction from within my network.

Now, such transactions have no port number or any parameter specific to them.
So, I cant configure my router or firewall to block such transactions.

I was wondering, if I can write a program that disallows the users from entering 16 digit numbers anywhere on the internet. As there is nothing else otehr than a credit card that requires 16 digits (is there?)

Let me know if what I am thinking of is possible or not? and also please let me know where should i put such a program?
0
net-geek
Asked:
net-geek
  • 3
  • 2
1 Solution
 
msdixonCommented:
not all credit cards are 16 digits, i think amex is off by one (15 or 17 digits).

there's also a problem... how would you determine if they're entering a credit card number? you can't do it on your firewall because the stream will be encrypted by then. the only way to do it is to have the vb app running on every client and intercept the credit card number before it's submitted to the web server. this brings up a huge liability issue. if you know they've entered a credit card number, you could easily store that information somewhere (database, xml file, etc.). you'd have a huge legal battle if any fraudulent charges were found on any employees credit card, and they knew you were monitoring their input to their web browsers.

it's a bad idea... let them place their amazon and flowers.com orders. it would take a lot more work for you to develop this than you would save in increase productivity (which will be zero by the way)
0
 
vthoangCommented:
not really possible at the network level without blocking all traffic.
most cc transactions will go through a point to point
encription, and if it can be any port, you'll never be
able to see the credit card data or distinguish it from the data you permit.  side effect of secure transactions.
0
 
vthoangCommented:
that being said, you can install a program on everyone's system and monitor key strokes for credit card numbers. plenty of freewares for that.  very intrusive but possible.  
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
net-geekAuthor Commented:
vthoang,

can you tell me some freeware monitoring credit card strokes and then stopping the transaction!

net-geek
0
 
msdixonCommented:
net-geek,

where do you work? i need to know so that i never apply for a job there..
0
 
vthoangCommented:
http://www.keyloggers.com/bigbrother.html
you'll need to shuffle through them to find something that
can trigger events based on keystroke like
http://www.fadsoft.com/UltraKeyboard.htm
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now