Improvement – Member Registration
One of the risks within the member registration function in Lelong.my is the lack of security
measurement to secure their website. At the member registration page, the website do not have a
specific security function or program to prevent hacker or Malware attacks. Subsequently, once the
website has been affected by Malware, the website would be collapsed or malfunctioned. Generally,
the users are not able to access the website until the Malware is cleaned up by IT support staffs and at
worst case scenario, it will lead to a severe leakage of personal data and information such as email
address, credit card information, billing addresses and etc.
An additional security measure - CAPTCHA is suggested to be programmed in the website’s
member registration page as an improvement plan to eliminate above said problem. CAPTCHA is
abbreviating of Completely Automated Public Turning test to tell Computers and Human Apart. It is
a type of program that uses to verify user input is not generate by computer or to determine whether
the user is human or not. It uses an advanced risk analysis engine and adaptive challenges to keep
automated software from engaging in abusive activities on the website.
Many website and system use CAPTCHA to further protect the system from preventing the
unscrupulous individuals that attempt to circumvent or decode the website. CAPTCHA also use to
protect the user’s personal information. Normally, CAPTCHA will generate a random graphic image
with a set of distorted letters and the user is required to enter the letters accordingly in order to
continue and complete the member registration process in the website. The program is also designed to
help visually impaired users by playing recording to allow this group of user to identify the
correspondence letters that required to be entered. Though this additional step is simply and easy to be
completed by a human but it will be a stopper for Bot or Malware to that try attempt any hack.
In conclusion, programming CAPTCHA into a website that contain sensitive information as
part of security measure will significantly reduce the risk of the website from being hacked or attacked
by Malware. [ CITATION Dif \l 1086 ]. Hence, Lelong.my is recommended to enhance their website by
applying the additional security program- CAPTCHA to protect the website, system and user privacy.
Pic 1.1