You shouldn't put the main emphasis on the kind of institution running the web site, but on the kind of system (and data) being put at risk if a site were to be penetrated. If it's just the marketing site of a commercial enterprise, not much harm is possible; if that site is connected to other systems, who knows? Same for academic institutions; imagine if that institution was the CDC where spores of deadly infectious diseases are kept - let's just hope they take security extremely serious!
nirmal lama wrote:...Commercial and Academic website regarding security.
What is a commercial website and what is an academic site?
Commercial website- website that sells different products, or that are for promoting some information.
Academic website- basically university websites, institutional website
And I am trying to figure out what will be the differences between them regarding the security of those websites.
Security is different from site to site. Heck, security is different from page to page. IMO, I doubt there is an answer to this question -- at least one that can be used for anything more than just anecdotes.
Tim's right - it's the nature of the data that matters, not the type of institution. I work in a University, and the security requirements differ hugely between systems. I know of one system where the data is sensitive enough that it's stored on computers that aren't allowed to be networked.