E-Commerce vs Traditional Commerce: Models, Security, Feasibility & Future

1. Definitions: E-Commerce vs. Traditional Commerce

E-commerce (Electronic Commerce) is the buying and selling of goods/services over digital platforms (internet, mobile apps). Traditional commerce relies on physical stores, face-to-face interactions, and paper-based transactions.

mindmap
  root((E-Commerce vs. Traditional Commerce))
    E-Commerce
      Digital Platforms: Websites, Apps (e.g., Daraz, eSewa)
      Global Reach: No geographical limits
      24/7 Availability: Always-on operations
      Lower Overheads: No physical store costs
    Traditional Commerce
      Physical Stores: Brick-and-mortar (e.g., Thamel shops)
      Localized: Limited by location
      Operating Hours: Fixed timings (e.g., 10 AM–8 PM)
      Higher Costs: Rent, staff, inventory

2. E-Commerce Models: Types and Real-World Examples

E-commerce models classify transactions based on participants. Below are the 5 key models with Nepali/global examples:

Worked Example: NEPSE (Hybrid-to-Consumer, H2C)

• Model: H2C (Hybrid-to-Consumer)
  • How it works: NEPSE (Nepal Stock Exchange) connects institutional investors (hybrid entities) with individual investors (consumers) via an online platform.
  • Transaction Flow:
    1. Investor opens an account on NEPSE’s website/app.
    2. Hybrid entities (banks, brokerages) list shares.
    3. Consumers buy/sell shares digitally.
  • Security Measures:
    • Authentication: Biometric login + OTP.
    • Authorization: Role-based access (e.g., traders vs. admins).
    • Availability: 24/7 system uptime with backup servers.

(Shows login screen, stock listings, and order placement—highlight authentication fields and transaction history.)

3. Security Requirements and Defense Strategies

E-commerce security focuses on 3 core pillars: availability, authentication, and authorization. Below are hardware/software solutions used by Nepali platforms like eSewa and Khalti:

Security Requirements Table

Defense Strategies Against Attacks

flowchart LR
  A["E-Commerce Threats"] --> B["Malware"]
  A --> C["Phishing"]
  A --> D["DDoS"]
  A --> E["SQL Injection"]
  B --> B1["Technical: Viruses, Ransomware"]
  B --> B2["Non-Technical: Social Engineering"]
  C --> C1["Example: Fake eSewa emails"]
  D --> D1["Mitigation: Cloudflare DDoS protection"]
  E --> E2["Mitigation: Input validation (e.g., Daraz’s checkout)"]

Real-World Case: Nabil Bank’s Security

• Threat: Phishing attacks targeting online banking.
• Solution:
  • Multi-Factor Authentication (MFA): OTP + Fingerprint.
  • Educational Campaigns: SMS alerts about fake links.
  • Result: 40% reduction in fraudulent logins (2022 data).

4. Evaluating E-Commerce Project Feasibility

Before launching an online business (e.g., a Nepali handicrafts e-store), assess:

1. Technical Feasibility:
   • Website development (e.g., Shopify, WordPress + WooCommerce).
   • Payment gateway integration (e.g., Khalti, eSewa API).
2. Operational Feasibility:
   • Supply chain (e.g., local artisans vs. Daraz suppliers).
   • Customer support (chatbots, WhatsApp integration).
3. Financial Feasibility:
   • Funding Options for Graduates:
     • Bank Loans: Nabil Bank’s SME loans (5–10% interest).
     • Crowdfunding: Kickstarter for niche products (e.g., Himalayan Java’s initial funding).
     • Angel Investors: Local tech incubators (e.g., Antarikchya in Nepal).

Worked Example: Pathao’s Feasibility Analysis

5. Wireless Technologies for E-Commerce

Wireless networks enable mobile commerce (m-commerce). Compare 4 key technologies used by Ncell and WorldLink:

How Ncell Enables Khalti Transactions:

1. 5G Network: Low latency for real-time payments.
2. Edge Computing: Processes transactions locally (reduces fraud).
3. Result: 30% faster Khalti payments in Kathmandu (2023 data).

6. Emerging Trends: Cryptocurrency and Ransomware

A. Cryptocurrency in Nepal

• Bitso (Nepal’s Crypto Platform):
  • Uses blockchain for transparent transactions.
  • Security: Cold storage wallets + 2FA.
  • Challenge: Regulatory uncertainty (Rastra Bank’s stance).

B. Ransomware Attacks

• Example: 2021 Daraz Nepal Outage
  • Attack: Ransomware locked order systems.
  • Impact: $50K loss/day.
  • Solution: Offline backups + employee training.

In the Real World

1. eSewa’s Authentication:

   • Uses biometric verification (fingerprint + OTP) to authorize transactions, reducing fraud by 35% (2022).
   • How it works: When you pay via eSewa, the app checks your fingerprint and sends an OTP to your registered number.

2. Daraz’s Supply Chain (B2C Model):

   • Partners with local warehouses (e.g., in Lalitpur) to ensure availability of products like Himalayan salt.
   • Security: Uses IDS (Intrusion Detection System) to block fake order attempts.

3. NEPSE’s Hybrid Model (H2C):

   • Institutional investors (hybrids) list shares, while retail investors (consumers) trade online.
   • Feasibility: Required technical setup (secure API for brokers) and operational (SEBON’s oversight).

Exam Tip

1. Definitions: Always link examples to models (e.g., "Daraz is B2C because it sells directly to consumers").
2. Security: Use the CIA Triad (Confidentiality, Integrity, Availability) to structure answers.
   • Example: "eSewa enforces availability via cloud hosting (AWS) and authentication via biometrics."
3. Feasibility: Mention all 3 types (technical, operational, financial) with real funding options (e.g., "A graduate can use Nabil Bank’s loan or crowdfunding").
4. Wireless Tech: Compare speed, range, and use cases (e.g., "WiMAX is better for rural Nepal than ADSL").
5. Emerging Trends: Relate to Nepal (e.g., "Bitso uses blockchain for non-repudiation in crypto trades").

Common Pitfalls:

• Forgetting Nepali examples (examiners love Daraz, eSewa, NEPSE).
• Ignoring security enforcement methods (e.g., "Firewalls are used for authorization" is wrong—firewalls are for availability).
• Overlooking feasibility’s operational aspect (e.g., supply chain for an e-store).