secuirty of online bankingjan12th

8/12/2019 Secuirty of Online Bankingjan12th

1/36

TABLE OF CONTENT

ABSTRACT.3

CHAPTER 1: BANKING SECURELY ONLINE.3

1.1 Target Onl ne Ban! ng "# Atta$!%&

1.1.1 Atta$!% "# P' %' ng&

1.1.( Atta$!% "# )al*are+

1.1.3 Atta$!% "# P'ar, ng-

1.( T % #"r Sa#e Onl ne Ban! ng-

CHAPTER (: SECURITY TESTING AN/ CO)PLIANCE FOR ONLINE 0

(.1 Se$ r t2 Te%t ng Categ"r e%11

(.( Se$ r t2 Stan ar %.11

(.3 C", l an$e te%t ng...1-

(.& Relate 4"r!15

CAHPTER 3: INTERNET BANKING SECURITY POLICY.10

3.1 A$$" nt O en ng In#"r,at "n.10

3.( O r In#"r,at "n Se$ r t2 Stan ar %..10

3.3 Onl ne Pr 6a$2 an Se$ r t2..(7

3.3.1 I/% an Pa%%*"r %...(7

3.3.( Se$ re S gn8"n..(7

3.3.3 E,a l.(7

3.3.& L n! t" "t'er *e9 % te%(11


2/36

CHAPTER &: SAFE 4OR/ FOR ONLINE BANKING..((

CHAPTER +: FRAU/ PRE ENTION(+

CHAPTER -: CONCLUSION.3&

CHAPTER ;: FUTURE 4ORK3&

REFERENCE..3-

BANKING SECURELY ONLINE

2


3/36

ABSTRACT

Onl ne 9an! ng % a 6er2 ea%2 r"$e%% t'at


4/36

Reg larl2 l"g n t'ere a$$" nt #"r $'e$! ng t'e r 9alan$e.

E, l"2 ng $re t $ar % #"r a2,ent.

T'e2 %'" l n"t a$$e%% t'e r a$$" nt n 9l $ en6 r"n,ent%.

Fr", 9an! e,a l $"rre% "n en$e $an 9e $'e$!.

4'en t'e r a$$" nt % $", r", %e t'en t'e2 %'" l 9e ta!e a$t "n @ $!.

1.1Target Online Banking o Attack!

In target "nl ne 9an! ng 'a% ##erent t2 e% "# ele$tr"n $ #ra ? n *' $' %",e , "rtant t2 e%

are %$ %%e 'ere? t'at are:

Atta$!% "# P' %' ng.

Atta$!% n )al*are.

Atta$!% "# P'ar, ng.

1.1.1 Attack! o "#i!#ing :

It e, l"2 #"r #al%e e,a l ,e%%age% a% "# n 6 al reten ng "r agen$2 t"

n%t t t "n "# # nan$ al "r 9an! t" 2" r a% a re re%entat 6e. In t'at e,a l t" "##er 2"

%",e eta l% l !e% na,e? a%%*"r ? a$$" nt n ,9er? et$. an al%" "##er% $" nter#e t

*e % te #"r l n!%. 4'en t'ere g" 9e' n t'at "##er% a% *ell a% l n! t'at n#"r,at "n "#

re@ e%te t'en t'at ntr er a9le t" entran$e n t'ere a$$" nt% "# er%"nal n#"r,at "n

a% *ell a% # nan$e% t'at ,ean% 9alan$e. An"t'er *a2 t'at % " 8 * n "*% t'r" g'?

gen ne 9an! *e9 % te #r"nt age $" 2 t $an %'"*n. / % la2e real a re%% "# *e9

% te 9 t an2 eta l 2" t2 e nt" t'e " 8 t'at * ll 9e re%ent llegal $l ent%.

4


5/36

1.1.$ Attack! in %al&are :

It % %"#t*are $" e *"r #"r ,al $ " %l2 $ra#te . C rrentl2 $", ter

r"gra,% are re%ent t'at ntr er% all"* t" #ra ,anner t" t'ere t'at % %e$ r t2 "#

tra t "nal *'en "nl ne 9an! ng tran%a$t "n% #"r e#en ng. In ,al*are? atta$!% are a

#a$t"r n # nan$ al $r ,e r ng "nl ne. A$t all2? ,al*are % er'a % t" t' % ,al $ " %

%"#t*are t2 e t" e e$ te %",e " erat "n% t'at are #"ll"* ng:

Ro''er( in Account in or)ation :

T'r" g' ,al*are !e2%tr"!e% $an $a t re t" enter nt" 2" r l"g n #"r eta l%.

Al%"? t $an "9%er6e a% *ell a% $a t re "t'er n#"r,at "n 2" e, l"2 #"r 2" r n @ ene%%

a t'ent $ate% % $' a% % e$ al ,age% *' $' % 2" $'"%en "r el%e ,ag $ *"r % .

Re*lace)ent or ake &e' !ite :

B2 ,al*are? r" $e *e9 age% t" %'"* t'at % 6al "r n6al . S 9%t t te

2" r 9an! 'a6e 6al *e9 % te a,"ng a age t'at % a9le t" a ear ,at$' ng? 9 t t'at

a re%% "# *e9 * ll ##er "ne *a2 "r an"t'er. F"r n%tan$e ,an8 n t'e , le atta$!%

% te all"*% t" atta$!er t" nterr t 2" r %er eta l. T'at atta$!er n$l e% e tra # el #"r

re l $a t'e *e9 age *'en 2" " en 2" r 9r"*%er nternet. T'en 2" % 9, t 2" r eta l

a#ter t'at % %ent t" ,al $ " % an 9an! atta$!er * t'" t 2" !n"*.

+i,acking to Account :

T'r" g' ,al*are? * t'" t 2" !n"* t $an ' Da$! 2" r 9r"*%er a% *ell a%

tran%#er # n %. A#ter 2" g" t" l"g n n 9an! *e9 % te t'at %"#t*are e%ta9l %'e% an n%een

9r"*%er * n "* "n 2" r %2%te, a#ter t' % t l"g n t" 2" r 9an! an rea % a$$" nt

9alan$e an al%" generate% a %e$ret tran%#er # n % #"r ntr er8"*ne A>$.

1.1.- Attack! o "#ar)ing :

5


6/36

It atta$!% n6"l6e t'e %ett ng "# ,al $ " % $" e "n 2" r PC= 9 t? t'e2 a9le t" "$$ r

* t' n" an2 a*are a$t "n "n 2" r $", "nent. P'ar, ng % "ne "# t2 e atta$!% 2" " en an e,a l

atta$',ent "r e,a l t'at n%tall% n 2" r $", ter * t' ,al $ " % $" e. T'en " en t'e #a!e *e9

% te *' $' % %a,e t" 2" r # nan$ al n%t t t "n "r 9an!. I# 2" # n an2 "# t'at t'en 2" ,a2

$"n% er t'at ,al $ " % %er% are re% "n% 9le. T'e atta$!% *' $' are l %te are $reate 92 % ng

te$'n"l"g2 n%tea t'e2 nee n#"r,at "n.

In $a%e "# ' %' ng atta$!%? 2" * ll get 6 % t l n!% "r n#"r,at "n.

A,"ng ,al*are? 2" $an


7/36

%'" l al%" 'a6e t' % n#"r,at "n. A% 2" rea t' % n#"r,at "n? a2 art $ lar attent "n t" an2

,ent "n "# t'e ,et'" % %e #"r en$r2 t ng tran%a$t "n% an a t'ent $at ng %er n#"r,at "n.

Al%"? $'e$! t'e n#"r,at "n t" %ee # t'e 9an! re@ re% a t "nal %e$ r t2 n#"r,at "n 9e#"re

a t'"r ng a a2,ent t" a 9 % ne%% "r n 6 al t'at 'a% ne6er re$e 6e a a2,ent 9e#"re.

Be ore !etting u* an( online 'ill *a()ent0 c#eck t#e *ri ac( *olic( o t#e co)*an( or

!er ice (ou &ill 'e !ending *a()ent to.

Y" 'a6e t'e r g't t" l , t t'e n#"r,at "n an "nl ne 9an! %'are% * t' 9"t' t% arent

"rgan at "n an an2 "t'er # nan$ al n%t t t "n% %ee Pr"te$t ng Y" r Pr 6a$2 an H"*

An"n2," % Are Y" #"r ,"re n#"r,at "n . Be a*are t'at %",e "nl ne 9an!% ,a2 'a6e

%e arate r"$e re% #"r 'an l ng ea$' "# t'e%e re@ e%t%. Y" ,a2 al%" *ant t" %e a %er6 $e % $'

a% t'e Better B % ne%% B rea t" 6 e* an2 e %t ng ' %t"r2 "# " t%tan ng $"n% ,er $", la nt%a9" t r 6a$2 6 "lat "n%.

or !ecurit( *ur*o!e!0 c#oo!e an online *er!onal identi ication nu)'er 2"IN3 t#at i! uni4ue

and #ard to gue!! .

Be % re t" $'ange 2" r PIN reg larl2. /" n"t $'""%e a PIN t'at $"nta n% er%"nal n#"r,at "n

% $' a% 2" r 9 rt' a2 "r S"$ al Se$ r t2 n ,9er= an atta$!er , g't 9e a9le t" g e%% t'e%e.

Regar le%% "# t'e $ r$ ,%tan$e%? ne6er g 6e %",e"ne a$$e%% t" 2" r $ rrent PIN n ,9er %ee

C'""% ng an Pr"te$t ng Pa%%*"r % #"r ,"re n#"r,at "n .

In!tall anti5 iru!0 ire&all0 and anti5!*(&are *rogra)! on (our

Co)*uter and kee* t#e) u* to date.

In%tall ng an at ng t' % %"#t*are r"te$t% 2" r $", ter an t% $"ntent% aga n%t

na t'"r e a$$e%%. Y" %'" l t rn "n a t",at $ ate% #"r t'e%e r"gra,% "r? # r", te ?

al*a2% agree t" "*nl"a %2%te, ate% a% %""n a% t'e2 are a6a la9le %ee Un er%tan ng

Ant 8 r % S"#t*are? Un er%tan ng F re*all%? an Re$"gn ng an A6" ng S 2*are #"r

,"re n#"r,at "n .

Regularl( c#eck (our online account 'alance or unaut#ori6ed acti it( .

7


8/36

T , ng % a #a$t"r n 2" r re% "n%e t" na t'"r e ele$tr"n $ # n tran%a$t "n%. I# 2" re$e 6e a

a er a$$" nt 9alan$e? ,a!e % re t'at 2" re$"n$ le t * t' 2" r "nl ne 9alan$e.

U!e a credit card to *a( or online good! and !er ice!

Cre t $ar % % all2 'a6e %tr"nger r"te$t "n aga n%t er%"nal l a9 l t2 $la ,% t'an e9 t $ar %.

S",e $re t $ar % l , t er%"nal l a9 l t2 #"r na t'"r e tran%a$t "n% t" J+7. Per%"nal l a9 l t2

#"r e9 t $ar % $an 9e ' g'er. A$$"r ng t" t'e Fe eral Re%er6e


9/36

Y" r 9an!

T'e l"$al "l $e

T'e Fe eral Tra e C",, %% "n 'tt :>>***.#t$.g"6

T'e Internet Cr ,e C", la nt Center 'tt :>>***. $3.g"6

T'e t'ree ,aD"r $re t 9 rea % E@ #a ? E er an? an Tran% Un "n %ee Pre6ent ng an

Re% "n ng t" I ent t2 T'e#t #"r ,"re n#"r,at "n .

C+A"TER 5 $

Online Banking in t#e real &orld a! *art o t#e Securit( Te!ting and Co)*liance75

Introduction

T'e "nl ne 9an! ng % "t'er* %e $alle a% Internet89a%e ele$tr"n $ 9an! ng. Onl ne

9an! ng % a 6er2 ea%2 r"$e%% t'at


10/36

%e$ r t28a*are % #a le . I# *'en t'e 'a$!er% atta$! t'e r a$$" nt% t'en t'e2 *" l n"t 9e a9le t"

ent tle t" get t'e ,"ne2 9a$!. At re%ent n t'e "nl ne 9an! ng %2%te,% t'ere are ( t2 e% "#

%e$ r t2 r %!% t'"%e are 'a en ng #re@ entl2.

Cl ent>%er6er a l $at "n % re re%ente t % t'e # r%t r %! n t'e Onl ne 9an! ng %2%teT'e%e %2%te,% are ' g'l2 %e$ re t'en "nl2 t'e2 * ll re tat "n #r", t'e $ %t",er%. T'e r n$",e

* ll al%" n$rea%e 9a%e "n t'e %age "# t'e $ %t",er%. T'e "nl ne 9an! ng %2%te,% are nee t"

, r"6e t'e er#"r,an$e "# t'e %2%te,% an al%" * t' t'e %e$ r t2 $"n%tra nt%. U% all2 t'e

r"9le, $",e% #r", t'e Ser6er % e %",et ,e% t * ll $",e #r", t'e net*"r! %e$ r t2. T'e2

nee t" $reate "ne %e$ re $",, n $at "n $'annel 9et*een t'e $l ent %2%te, an * t' t'e 9an!


11/36

F"r an e6er2 le6el 6ar " % te$'n"l"g e% are %e .

Here t'e # r%t %te nee % ent #2 t'e r %!% *' $' are #a$ ng #re@ entl2 *' le % ng "nl ne

9an! ng %2%te,%. T'e ne t %te % t" %ele$t t'e %e$ r t2 te$'n"l"g e% *' $' % % ta9le t" t'e

a$$"r ng t" t'e r %!%. A#ter t'at *e %'" l g 6e e,"n%trat "n% 9a%e "n t'e r %!% an t'e

t l at "n "# t'e te$'n"l"g e% an *'at are t'e %e$ r t2 e,an % *' $' are n t'e ##erent

le6el%. A#ter t'at *e * ll " t'e te%t ng *' le " ng te%t ng nee t" ta!e t'e re% lt% an ,etr $%.

T'e2 * ll e,"n%trate t'e r %! "# t'e a l $at "n an t'e @ al t2 "# t'e a l $at "n.

O r ,a l a , % t" $reate a a r"a$' t" rea$' t'e %e$ r t2 le6el% #"r t'e "nl ne

9an! ng %2%te,. T' % a r"a$' * ll 9e e% gne 92 t'e e ert% 92 ta! ng t'e 9a% % a% %e$ r t2%tan ar % an t'e "l $ e% ta!en 92 t'e 9an!. Be#"re , le,ent ng t'e %tan ar % "# t'e %e$ r t2

t'e2 * ll t' n! a9" t t'e $l ent *' $' are % ta9le t" t'e nee % "# t'e $ %t",er an t'e2 * ll

%at %#2 t'e $ %t",er. T'e2 * ll $", are * t' t'e nee % an t'e%e # ll t'e re@ re,ent% "# t'e

%e$ r t2.

$.1 CATEGORIES o SECURITY TESTING75

Se$ r t2 te%t ng * ll 9e "ne n t'e t*" *a2% "ne % n t'e a9%en$e "# t'e ,al $ " % $" e% at t'at

t ,e '"* t % *"r! ng? % t all"* ng an2 na t'"r e %er% an t'e er#"r,an$e "# t'e

a l $at "n. In t'e ne t *a2 ,al $ " % $" e * ll 9e n%erte an " t'e te%t ng n t'e re%en$e "#

t' % ,al $ " % $" e. At t' % t ,e t'e2 * ll te%t t'e le6el "# t'e %e$ r t2 *'et'er are t'e2 %t" ng

t'e n"r,al # n$t "nal t2 "# t'e a l $at "n. T' % % ,a nl2 $"n$entrate% "n t'e Me l" t%< t'an t'e

%e$ r t2 # n$t "n%. An 'ere *e * ll $'e$! % t'ere an2 9 ##er "6er#l"* "# t'e err"r% a ear ng n

t'e %2%te,= e6en t'" g' t'e%e are " n"t an2 , a$t t" t'e Se$ r t2 "# t'e a l $at "n.

11


12/36

T'ere are t*" t2 e% te%t ng n t'e Se$ r t2 te%t ng: F n$t "nal te%t ng an n"n8

# n$t "nal te%t ng. In t'e # n$t "nal te%t ng # n$t "nal t2 "# t'e te%t ng * ll 9e te%te t'at ,ean%

a$$e%% ng $"ntr"l% * ll 9e te%te ? 92 g 6 ng *r"ng eta l% l !e na t'"r e %erna,e an

a%%*"r . B2 g 6 ng t'e % e$ al $'ara$ter% n t'e a%%*"r # el t % "%% 9le t" 9rea! t'e

a l $at "n. T" l"g nt" t'e a l $at "n 9el"ng% t" "ne% a$$" nt nee t" g 6e %erna,e an

a%%*"r an t'"%e t*" 'a6e t" ,at$' t" t'e %2%te, t'en "nl2 'e $an a9le t" l"g nt" t'at

%2%te,. A#ter te%t ng *e $an en% re t'at t'e %2%te, ,eet ng t'e # n$t "nal re@ re,ent% are n"t.

4e * ll $", are t'e e e$te re% lt% * t' a$t al re% lt%. At t' % t ,e *e * ll get an ea "n t'e

9e'a6 "r "# t'e a l $at "n.

T'e %e$"n t2 e % t'e N"n8# n$t "nal %e$ r t2= t % al%" $alle a% t'e r %!89a%e

%e$ r t2 te%t ng. It n$l e% ,an2 "t'er te%t ng t'at are t'e %tre%% % te%t ng? 6"l ,e te%t ng. B tt'e a l $at "n * ll e$ e 9a%e "n t'e %tre%% te%t ng an $an 'an le an2 n ,9er "# t'e %er% at a

t ,e. In t' % t2 e "# te%t ng ,al $ " % $" e % n%erte n t'e a l $at "n an t'e2 * ll te%t t'at

*'et'er t'e $" e * ll all"* t" l"g nt" t'e a l $at "n. An al%" t'e2 * ll n%ert %",e %tr"ng

S L %tate,ent% n t'e la$e "# t'e a%%*"r # el . T'e a l $at "n %'" l n"t all"* n%ert ng

t'"%e t2 e% "# %tate,ent%. T" #"ll"* t' % t2 e "# r"$e%% t % r"9le, * t' t'e tra t "nal te%ter%.

N"r,al te%ter% " n"t t' n! a9" t t'e atta$!% * ll 9e 'a en "n t'e %2%te,. In t' % r"$e%% t'e2

* ll tr2 * t' t'e P""r a%%*"r %.

.

)a nl2 t'ere are t*" t2 e% "# te%t ng t'"%e are 4' te 9" te%t ng an Bl"$! 9" te%t ng. Se$ r t2

te%t ng * ll 9e "ne 92 % ng t'e%e t*" $"n$e t%. In t'e *' te 9" te%t ng nternal %tr $t re "# t'e

%"#t*are * ll 9e te%te . F"r e a, le ##erent e6el" er% * ll *r te $" e #"r t'e ##erent

," le%. T'ere t'e2 * ll 6er #2 92 g 6 ng t'e ##erent n t 6al e% t'"%e * ll 9e %e 92 t'e

'a$!er%. At t' % t ,e "n*ar % t'e2 * ll tr2 t" $at$' t'e %e$ r t2 $"n%tra nt% 92 g 6 ng t'e

##erent n t 6al e% n t'e ##erent # el %. An t'e2 * ll tr2 t" !n"* t'e l"a ng "# t'e ##erent

age% "# t'e a l $at "n. An * ll ent #2 t'e r"$e%% ng t ,e ta!en 92 t'e ##erent ," le%

an t'e2 * ll tr2 * t' ,al $ " % $" e *' le l"a ng "ne age t" an"t'er age. It % n6"l6e * t'

,"%t "# t'e N"n # n$t "nal te%t ng "nl2. It %'" l n"t $"6er , $' a9" t t'e F n$t "nal te%t ng.

12


13/36

Bla$! 9" te%t ng ,ean% " ng te%t ng * t'" t $"n% er ng t'e %" r$e $" e "# t'e a l $at "n. It

% ,"re $"n$erne a9" t t'e # n$t "nal t2 "# t'e a l $at "n. B2 % ng t'e ##erent te$'n @ e%

l !e B" n ar2 6al e% anal2% %. It % ,a nl2 $"n$erne a9" t t'e " t t "# t'e a l $at "n 92

ta! ng t'e In t. Here *e nee t" te%t * t' t'e ##erent t2 e% "# n t%. Here n t' % te%t ng

nternal $", "nent% * ll 9e gn"re . In t'e Bla$! 9" te%t ng a l $at "n * ll 9e e e$ te

n%tea "# t'e a l $at "n n"t e e$ te n t'e *' te 9" te%t ng. T" 9rea! t'e %2%te, *e * ll

*r te te%t $a%e% * t' t'e ,al $ " % n t%. A% art "# t'e %e$ r t2 te%t ng t""l% al%" %e t'e2 $an

al%" $alle a% 6 lnera9 l t2 %$anner% t'e2 are N !t" an Ne%% %. T'e%e t""l% * ll atta$' t'e

a l $at "n n t'e ##erent *a2% an te%t t'e %ta9 l t2 an %e$ r t2 "# t'e a l $at "n.

C"n#"r,an$e te%t ng al%" "e% !n"* t'e a l $at "n % *"r! ng a$$"r ng t" % e$ # $at "n%. It %

al%" art "# t'e 9la$! 9" te%t ng.

$.$ SECURITY STAN8AR8S75

T'ere are %" ,an2 %e$ r t2 %tan ar % t" ent #2 t'e a r"a$' t" " t'e %e$ r t2 te%t ng? 92 % ng

t'e%e "## $ al %tan ar % e6al at "n "# t'e IT r" $t%. T'e #"ll"* ng are t'e ,"%t " lar

%tan ar % *' $' are %e n t'e n %tr2: Ba%el II? ISO (1155 an FISCA)? CC>CE)? ISO

1;;00? COBIT an NIST.

t'e C",,"n )et'" "l"g2 #"r IT Se$ r t2 E6al at "n CE) an T'e C",,"n Cr ter a #"r IT

Se$ r t2 E6al at "n CC are %e a% t'e %tan ar e6al at "n $r ter a. T'e2 'a6e re are 9a%e

"n t'e %e6en e6al at "n a%% ran$e le6el% EAL% t % ,"%tl2 %e t" e6al ate IT r" $t%. Here

t'e nternat "nal %tan ar % *' $' * ll %e #"r e6al at "n "# t'e r"$e%% an t'e r" $t t'at %

C",,"n Cr ter a ISO>IEC 1+&75 . It % a$$e te *"rl * e. It % "ne "# t'e , "rtant #ra,e

*"r! %e *"rl * el2 t" e6al ate a r"$e%% #"r t'e %e$ r t2 %tan ar % an a re are r" $t

%tan ar %.

T'e ISO 1;;00 % a n %tr2 % e$ # $ %tan ar t % %e t" re are % e$ # $ %tan ar % #"r t'e r

"*n n %tr2 It % n6"l6e n t'e area% "# n#"r,at "n %e$ r t2 "l $2 an a$$e%% $"ntr"l an al%"

n t'e n#"r,at "n %2%te,% ,a ntenan$e an $", l an$e. T'e ITGI IT G"6ernan$e In%t t te an

ISACA In#"r,at "n S2%te,% A t an C"ntr"l A%%"$ at "n 9"t' are t"get'er $reate a

#ra,e*"r! COBIT C"ntr"l O9De$t 6e% #"r In#"r,at "n an Relate Te$'n"l"g2 ? It % a t""l%et

#"r t'e IT ,anage,ent an % "rt. It $"nta n% ,an2 %e$ r t2 $"ntr"l% % $' a% %er a$$" nt

13


14/36

%e$ r t2 an $"ntr"l%? ata $la%% # $at "n an # re*all ar$' te$t re%? ,anage %e$ r t2? l"g $al

a$$e%% $"ntr"l an Se$ r t2 "# "nl ne ata.

T" # ll t'e ga 9et*een t'e $"ntr"l re@ re,ent%? 9 % ne%% r %!% an te$'n $al %% e%

,anager% %e t'e #ra,e *"r! COBIT. T'e NIST Nat "nal In%t t te "# Stan ar % an

Te$'n"l"g2 * ll r"6 e g el ne% "n t'e Net*"r! Se$ r t2 Te%t ng #"r t'e ##erent " erat ng

%2%te,%. It * ll g 6e ,"re n#"r,at "n "n t'e %e$ r t2 6 "lat "n% *' $' are 'a ene re6 " %l2

"n t'e ##erent %e$ r t2 an net*"r! %2%te,%. T'ere % a 9""! $alle Orange B""! *' $' %

9l %'e 92 t'e US /e art,ent "# /e#en%e "rgan at "n Nat "nal C", ter Se$ r t2 Centre

NCSC #"r t'e %e$ r t2 a r"a$'e% an r"$e%%e%. F"r Internet 9an! ng t'ere % a #a," %

%e$ r t2 %tan ar $alle a% Ba%el II.

T' % %tan ar * ll e%$r 9e %" ,an2 %e$ r t2 $"ntr"l% % $' a% ata ntegr t2 "

tran%a$t "n%? a t tra l% an $"n# ent al t2 "# 9an! n#"r,at "n? a t'ent $at "n "# $ %t",er%?

n"n8re at "n "# "nl ne tran%a$t "n% an a t'"r at "n $"ntr"l%. T'ere % an nternat "nal

"rgan at "n t" r"6 e t'e eta l% l !e P 9l $ Ke2 In#ra%tr $t re #"r F nan$ al Ser6 $e% an al%"

e%$r 9e $ert # $ate89a%e %"l t "n% #"r %e$ re Internet 9an! ng a l $at "n% t'at %tan ar #ra,e

*"r! % ISO (1155. T" e6al ate an e la n t'e general a l $at "n $"ntr"l% n t'e # nan$ al

%2%te,% t'ere % an "rgan at "n e% gne t'at % FISCA) T'e Fe eral In#"r,at "n S2%te,

C"ntr"l% A t )an al . T'ere % a @ e%t "n ra %e '"* t" %e t'e%e %tan ar % t" re are a

$", l an$e te%t ng a r"a$' an #"r %e$ r t2 te%t ng "# t'e Onl ne 9an! ng %2%te,%.

$.- CO%"LIANCE TESTING OR ONLINE BANKING SECURITY

C", l an$e te%t ng ,ean% t" en% re t'e %2%te, % e% gne 9a%e "n t'e %tan ar %. Here *e * llte%t *'et'er t'e "nl ne 9an! ng %2%te,% * ll *"r! a% er t'e %tan ar % an 'a6e an2 %e$ r t2

6 "lat "n%. 4e * ll %e %",e %e$ r t2 te%t ng te$'n"l"g e% t" $reate an a r"a$' #"r $", l an$e

te%t ng %2%te, an a#ter t'at nee t" en% re "nl ne 9an! ng %2%te,% #"ll"* ng t'e Se$ r t2

$r ter a an Stan ar %. C", l an$e te%t ng % % e$ # $all2 %e t" eter, ne *'et'er t'e %2%te,

14


15/36

,eet% %e$ r t2 %tan ar %. 4e * ll %e $", l an$e te%t ng #"r Onl ne 9an! ng %2%te,% #"r t' %

t'ere are t'ree rea%"n%.

F r%t? $", l an$e te%t ng * ll $"nne$t a nee e 9et*een $ %t",er% an %er6 $e

r"6 er% t" e $'ange n#"r,at "n #"r t'e nternal an e ternal r "%e. C", l an$e te%t ng * ll

al%" n$rea%e t'e $ %t",er


16/36

*'en $", ar ng * t' t'e %tan ar % "# t'e "rgan at "n *' $' % 9 lt t'e "nl ne 9an! ng %2%te,

a l $at "n. T'ere are %" ,an2 re@ re,ent% $'ange% 92 $", ar ng * t' t'e # n$t "nal

re@ re,ent% an n"n # n$t "nal re@ re,ent% an %e$ r t2 re@ re,ent%. Se$ r t2 te%t ng %

n"r,all2 treate a% t'e Bla$! 9" te%t ng n ter,% "# t'e , le,entat "n n er te%t IUT . )"%t

"# t'e te$'n @ e% %e #"r t'e %e$ r t2 te%t ng are $"n% ere a% t'e 9la$! 9" te%t ng. T'e

nternal %tr $t re "# IUT ,a2 n"t 9e a$$e%% 9le. U% all2 C", l an$e te%t ng * ll 9e "ne a#ter

t'e 9la$! 9" te%t ng. F"r t'at rea%"n *e * ll %e t'e te$'n @ e% "# t'e %e$ r t2 te%t ng t" e% gn

an 9 l an al%" er#"r, $", l an$e te%t ng. T'e2 are al%" $alle a% t'e Bla$! 9" te%t ng

te$'n @ e%. C", l an$e te%t ng % t $"nta n% ##erent $"lle$t "n% "# t'e legal an llegal n t%?

'ere t'e " t t% are $", are * t' t'e n %tr2 %tan ar % a$$"r ng t" t'e g 6en n t%. An al%"

t'e2 are $", are * t' t'e t' ng% *' $' are alrea 2 , le,ente #"r t'e ##erent a l $at "n%.

U% all2 *e * ll %e a ##erent r"$e%% t" 9 l a $", l an$e te%t ng %2%te, t'an a n"r,al%2%te,? *' $' % n"t 9 l l !e a n"r,al %2%te, %'" l #"ll"* %tan ar %.

F r%t "ne % t" ent #2 a %tan ar "r "l $2 t" $", are * t' t'e Onl ne 9an! ng %2%te, *' le

" ng te%t ng a$t 6 t e%. In t'e # r%t %te t'e2 * ll ent #2 an %ele$t t'e %tan ar #"r t'e te%t ng.

I# *e ta!e an e a, le 'ere t'e2 'a6e $'"%e t'e $",,"n %tan ar Ba%el II. )"%t "# t'e 9an!%

l !e nat "nal an nternat "nal 9an!% * ll ann" n$e t'at t'e2 'a6e t'e %tan ar % "# t'e n %tr2

*' $' are nternat "nal. 4'2 9e$a %e t'e r ,a n $"n$ern % t" g 6e an e##e$t 6e *a2 t" t'e

$ %t",er% t" %e t'e Onl ne 9an! ng %2%te,%. S" t'at *e * ll %ele$t a 9an! t'at %'" l "%%e%%e%

t'e %tan ar % t'at 9an!% % all2 ,ent "n% a% t'e %tan ar %. S" t'e %e$"n "ne t'at nee t"

re are $", lete re@ re,ent% t" %'"* t'e % e$ # $ ta%!% ,eet t'e % e$ # $ %tan ar %. F"r

e a, le %e$ re %2%te, nee % an ant 6 r % %"#t *are t'at %'" l 9e ate an t" ate a% er

t'e n %tr2 %tan ar %. T'e %2%te, %'" l al%" $"nta n a # re*all t'at %'" l n"t 9e 9rea!a9le 92

t'e 'a$!er%. T'ere % n" $'an$e t" g 6e g arantee t'at "ne $", ter % 177 er$ent %e$ re? 9 t 92

n%tall ng an ant 86 r % an # re*all *e $an %a2 t'at *e 'a6e re $e t'e r %! at t'e l"* le6el.

A#ter " ng t'e nternal %e$ r t2 %tan ar % *e * ll g" #"r t'e ne t %te .

T' r ? *e * ll e6el" t'e te%t% 92 % ng t'e % e$ # $ a r"a$'e% #"r t'e %e$ r t2 te%t ng "r *e

* ll %e t'e t""l% #"r t'e re are eta le % e$ # $at "n% #"r t'e %e$ r t2. 4' le % ng t'e

##erent te%t a r"a$'e% ##erent area% *e * ll $"6er? 9a%e "n t'e a r"a$' t'at re% e$t 6e area

* ll 9e $"6ere n t'e te%t ng. Te%t ng a r"a$'e% ,a2 n$l e ntegr t2 an $"n# g rat "n

16


17/36

$'e$!er%? 6 lnera9 l t2 %$ann ng? enetrat "n te%t ng an l"g re6 e*. S",e "# t'e te%t ng

te$'n @ e% %e t"get'er t" g 6e t'e er#e$t "n "# t'e te%t ng.

F" rt' "ne % nee t" 6er #2 an e la n t'at t'e $", l an$e "# "6erall %2%te, 'a% 9een a$' e6e

* t' t'at te%t ng. lnera9 l t2 a%%e%%,ent%? enetrat "n te%t ng an a t re6 e*% "# %e$ r t2

$"ntr"l% en% re t'at "l $ e% an %tan ar % are $"rre$t.

$.9 RELATE8 :ORK

It % an , "rtant a$t 6 t2 t" r"6 e ' g' le6el Se$ r t2 t" t'e "nl ne 9an! ng %2%te,%. St ll t'e

re%ear$' % g" ng "n an al%" t' % % t'e ,a n area re@ re $"nt n " % re%ear$'. T'e2 ,a nl2

$"n$entrate t" re are $", l an$e te%t ng #ra,e *"r! an al%" #"r t'e net*"r! a l $at "n%

n%tea "# t'e $"n$entrat ng "n t'e Onl ne Ban! ng %2%te,%. In t'e S2nta 89a%e te%t ng % a

9la$! 9" ? ata r 6en te%t ng te$'n @ e n t% $an 9e e%$r 9e l !e '"* t" g 6e *' $' t2 e "#t'e n t% $a %e t" %e$ r t2 6 "lat "n% %" nee t" te%t t'"%e 92 $"n$entrat ng ,"re "n t'"%e. SCL

% a r"gra,, ng lang age % e% gne #"r t'e r "%e "# S2nta an C"nte t %en% t 6e

$"n%tra nt% "# r"t"$"l%. It % a Pr"t"$"l $", "nent #"r t'e te%ter t" %e %2nta 9a%e te%t ng t"

e6al ate ##erent t2 e "# a l $at "n% % $' a% t'e net*"r! a l $at "n%. 4 t' t'e%e te$'n @ e%

%"#t*are tran%#"r,at "n te$'n @ e% are %e . S",e , "rtant r"t"$"l% are %e t" te%t %e$ r t2 "#

t'e a l $at "n.

-. INTERNET BANKING SECURITY "OLICY

T'e r "%e "# Ea%t B"%t"n Sa6 ng% Ban!


18/36

-.1. Account o*ening in or)ation7

It % , "rtant #"r t'e $ %t",er% an t'e 9an! t" 9e $erta n t'at t'e n#"r,at "n "9ta ne %

a9%"l te an % al%" r g't *' le " en ng an a$$" nt n an "nl ne 9a$!gr" n . In#"r,at "n "# t'e

$ %t",er % r"te$te 6er2 $r t $all2. I, r"6e a t'"r tar an ,ea% re% a%%e % n$e Se te,9er 11? (771? l !e t'e atr "t A$t 'a6e a e t" n#"r,at "n gat'er ne$e%% t e% #"r t'e ,"netar2

n%t t t "n%. T'r" g' t' % e6er2"ne % r"te$te an t'e # nan$ al %2%te, "# US % !e t %a#e.

C"nt n ng r"gre%% n te$'n"l"g2 ,ean% t'at " r a9 l t e% n "r er t" ,a nta n t'e n#"r,at "n

%e$ re an %a#e are ra %e .

-.$. Our In or)ation Securit( Standard!7

T'e r"$e re% an %tan ar % "# te$'n"l"g2 an %e$ r t2 are en'an$e an rat "nal e t" e#en

9e% e an2"ne *'" ga n% n"## $ al a$$e%% "# " r r 6ate n#"r,at "n? an a6" #ra "r

n 6 al t2 lar$en2. Pra$t $al? '2% $al an ele$tr"n $ %a#eg ar % t'at # l# ll t'e $entral e

r n$ le% are ,a nta ne t'e 9an! e, l"2ee% "%%e%% a % ta9le a$$e%% le6el "# " r r 6ate

n#"r,at "n % $' t'at t" $arr2 " t t'e r D"9% an t" g 6e 2" t'e a6a la9le " t , , %er6 $e.

T'e e, l"2ee% *"r! * t' la* en#"r$e,ent re re%entat 6e% t" #"ll"* an2 er%"n% t'"%e

*'" e t'er a$$e%% llegall2 "r t an e##"rt t" a$$e%% "r e, l"2 n#"r,at "n. In "r er t" n$rea%e

t'e n#"r,at "n


19/36

$", ter t" re,e,9er t'e a%%*"r ? ,a nl2 *'en t'e $", ter * t' " en a$$e%% *' $'

,ean% t'e "ne % t ate n a $"llege $", ter la9 "r n a l 9rar2 % e, l"2e

-.-.$ Secure Sign5on

4 t' t'e 'el "# t' % %er6 $e? 2" get r"te$te #r", #a!e "nl ne a$t 6 t2. 4'en 2" % gn

"n? %",e 6 % al $l e% are r"6 e 92 t' % %er6 $e %" t'at 2" are a*are t'at 2" are a6a la9le "n

" r *e9% te an t % %a#e #"r enter ng t'e n#"r,at "n. It al%" a%% %t% % t" ,a!e $erta n t'at t'e

# nan$ al n#"r,at "n $an 9e a$$e%%e "nl ne 92 "nl2 $ert # e er%"n%.

-.-.- E)ail

)a nl2 e,a l % n"t %" %e$ re "ne. It $" l 9e %e e an "t'er% $an 6 e* t al%". A6"

%en ng t'e n#"r,at "n t'at % r 6ate "r $"n# ent al t'r" g' e,a l t" % #r", " r *e9% te? 2" r

"*n e,a l? C"nta$t U% area? "r an2 "t'er er%"nal $", ter. T'" g'? # t'e # n$t "nal t2 "# e8

,a l % e, l"2e n 2" r Onl ne Ban! ng % gn "n? t'en t'e e,a l % %e$ re "ne an t'en t'e

er%"nal "r a$$" nt n#"r,at "n et$ $an 9e %ent a%%ert 6el2. 4e ,a nta n t'e In#"r,at "n t'at %

r"6 e t'r" g' e,a l #"r # l# ll ng t'e "## $ al an a t'"r tar an ne$e%% t e%.

-.-.9 Link! to Ot#er :e' Site!

F"r 2" r enD"2,ent an $"n6en en$e t'ere e %t% a r"6 % "n "# l n!% t" t'e "t'er *e9

% te%. T'e l n! ng an l %t ng "# a *e9 % te "e% n"t % e$ #2 t'at t'e $"ntent% "# t'e%e % te% are

re6 e*e 92 Ea%t B"%t"n Sa6 ng% Ban! = n"r "e% t % "rt? % gge%t "r a r"6e t'e %er6 $e%?

" n "n% "r r" $t% t'"%e "r g nate at t'e%e % te%. E6er2 *e9 % te ,a2 er'a % $"nta n a

n % al r 6a$2 "l $2 92 6 e*% t" t'e %tr 9 t "n an gat'er ng "# er%"nal n#"r,at "n. T'e

%e$ r t2 an r 6a$2 "# er%"nal n#"r,at "n t'at % r"6 e "n "t'er *e9 % te% ,a2 n"t 9e

g arantee 92 EBSB. L n!% t" t'e % te% t'at t'e "t'er "rgan at "n% ,a nta n are al%" r"6 e 92

19


20/36

" r *e9% te. Be a*are "# t'at # an2 relea%e er%"nal n#"r,at "n "n t'e l n!e nternet % te% %

re$te 92 t'e r 6a$2 "l $ e% "# t'"%e "rgan at "n% 9 t n"t 92 Ea%t B"%t"n Sa6 ng% Ban! .

9. SA E :OR8 OR ONLINE BANKING

Secure online 'anking &it# Sa e &ord t&o5 actor aut#entication

T'e "nl ne 9an! ng % an , "rtant tran% t "n * t' g"" lan %$a e n t'e , %t. T" * n t'e

$"n% ,er% n "nl ne 9 % ne%% %",e # nan$ al n%t t t "n% r"6 e% $ %t",er $are? %e$ r t2 an

$"n6en en$e. 4 t' t'e % "rt "# %a#e *"r "nl ne tran%a$t "n% are r"te$te . Ban! ng r"6 e%a $", et t 6e la$e t'at 2" 'a6e t" r 6e t'e re6en e an # nan$ al r" $t% are en'an$e

t'r" g' "nl ne tran%a$t "n.

Ban! ng r"te$t% t'e $ %t",er% n$a%e "# #ra lent tran%a$t "n% "ne n "nl ne? *'erea% t %

6er2 r %! %" t'at 9an! ng * ll ta!e $erta n %te % t" a6" t'e r %!% "n 9e'al# "# t'e $ %t",er%

an ,a! ng "nl ne #a$ l t2 * t' greater $"n# en$e %" t'at 9an! ng r"6 e% %e$ r t2 "l $ e% t"

t'e $ %t",er% *'" are t l ng "nl ne 9an! ng #a$ l t2.

:#at are dri e! in online 'anking con!ider &it# t&o5 actor aut#entication;

8)"%t "# t'e $"n% ,er% g 6e a t" r "r t2 #"r %e$ r t2 # t'e2 g" #"r # nan$ al n%t t t "n?

t'ere#"re $ %t",er% * ll e,an ? #"r 9an! ng n%t t t "n '2% $al %e$ r t2 r"6 e %tr ngentl2

* t' n #" r *all%. E6en $ %t",er% * ll e,an #"r t' % t2 e "# r"te$t "n #"r tran%a$t "n% n

"nl ne 9an! ng.

8FFIEC8 Fe eral F nan$ al In%t t t "n% E a, nat "n C" n$ l 'a% %% e # nan$ al %er6 $e% *' $

"# nternet 9a%e t" t'e 9an!% #"r t'e g an$e t" en'an$e ,et'" % "# a t'ent $at "n an atta n

$", l an$e n t'e en "# 2ear (77-.

8 Se$ re $", t ng % t'e large%t # nan$ al n%t t t "n a% *ell a% "nl ne $ %t",er% n t'e *"rl ?

*'ere lea ng 9an!% are e l"2e = Sa#e 4"r a t'ent $at "n %e$ re% , ll "n% "# %er% all "6er

t'e *"rl an r"te$t% 9 ll "n "llar% e6er2 a2 n "nl ne tran%a$t "n.20


21/36

Con enience and Con idence &it# a !i)*le !olution

T'ere are t*" #a$t"r% n $"n$ern * t' a t'ent $at "n *' $' n te% a n @ e r"te$t "n? t'"%e are

e% e$ all2 "ne t ,e a%% $" e OTP #r", t'e er%"nal PIN "# t'e %er% t" a$$", l %' %e$ re

a$$e%% t" a$$" nt ,anage,ent t'r" g' "nl ne a% *ell a% ' ge a l $at "n% "# 9an! ng? T"

a$t 6ate t'e a$$" nt "nl ne "# %a#e *"r ? reg %trat "n % re@ re t'at all"*% t'e $ %t",er nt"

"nl ne t' % % "# "ne8%te r"$e%%? t' % t"!en % #"r $"n6 n$e an #"r % , l $ t2? t % %" ea%2 t

t'e $ %t",er% 'a6e t" t" $' t'e 9 tt"n #"r t'e a t'ent $at "n.

Strengt#en (our 'rand

T'e t*" #a$t"r 6al at "n "# $"n% ,er % a r n$ le *' $' r"6 e% a %e$ r t2 n#ra%tr $t re t"$ %t",er%. O6er all $", et t"r% 2" , %t ga n tr %t #"r, t'e,. It r"6 e% 6er2 tang 9le an

,ar!eta9le % "rt t" 2" r 9 % ne%% n "nl ne t'r" g' 9 l ng an %trengt'en%. A ,e%%age * t'

"nl ne %e$ r t2 % el 6ere an * en% 2" r ,ar!eta9le t"!en% "# a t'ent $at "n al"ng * t' 2" r

9ran an al%" #"r 9r"a $ %t",er attra$t 6e %t2le% an $"l"r% are a6a la9le.

Sa e :ord or online Banking

It g 6e% %e$ re n#ra%tr $t re t" 2" r "nl ne $ %t",er% * t' "% t 6e a t'ent $ate. T'e

a t'ent $at "n *' $' *a% t"!en 9a%e %"l t "n t'at n$l e% ra an %,""t' e l"2,ent t"

21


22/36

t'e $ %t",er ? T" % , l #2 t'e r"$e%% "# e l"2,ent t'e %er %el# enr"ll,ent % $"n6en ent.

O en API % are %et ? #"r 2" r a$$e%% 9le 9an! ng a l $at "n% % , le $",9 nat "n % "##ere 92

t""l! t% an #"r 2" r art $ lar ar$' te$t re ta l"re , %t a$@ re . T'e ta%!% "# a t'ent $at "n

%2n$'r"n e * t' %er ate t'r" g' e %t ng? t ena9le% ea%2 , le,entat "n% an r"De$t

,anage,ent % % , l # e .

Sa e &ord or online 'anking5 %o'ile o*tion

It % an a t'ent $at "n "# er"8#""t r nt % , le,ente 92 "nl ne 9an! ng "# %a#e *"r *' $'

el 6er %e$ re? $ell '"ne% te t ,e%%age% an ,"9 le e6 $e% a% "ne t ,e a%% $" e% are n t ate

T'e $ %t",er% "# 9an! ng a$$e t # n$t "nal t2 "# t t'r" g' "nl ne 92 t l ng ,"9 le e6 $e "#

"*n #"r t'e $"n6en en$e.

"ro ide t#e #ig#e!t le el o !ecurit(

It "##er% r"9 %t? r"te$t ng a$$e%% l n! * t' %e$ re %"l t "n t" a$$" nt ,anage,ent "# "nl ne? "n 9 ll a2? # n tran%#er% an 9r"!erage tran%a$t "n%. Sa#e *"r %'"*% %e$ r t2 %tan ar % l !e

ANSI 0.0. It % ,"re %e$ re t'an %"l t "n% "# a t'ent $at "n are t'e " t "n #"r *"rl * e

%e$ r t2 ,a! ng $"n%$ " % t"*ar % $ %t",er%. A * e range "# nter" era9 l t2 *' $' "%%e%%

r" $t% "# t' r 8 art2 n ' n re % an a l $at "n% "# $"re 9an! ng % "##ere 92 %ea,le%%

ntegrat "n *' $' "# %"#t*are ar$' te$t re $"n$ern * t' %e$ re% $", t ng "ne.22


23/36

Lo&e!t co!t to )aintain and de*lo(

It "##er% t'e "*ner%' l"*e%t t"tal $"%t #"r e t'er a t'ent $at "n a6a la9le. It " n"t e re t'e

t"!en% "# %a#e *"r t" 2" r $ %t",er% 92 re e l"2 t"!en% "r el , nat ng t" re la$e 92 t'e r nee .

4 t' le%% % "rt? re la$e,ent $"%t% an 'el e%! 2" $an !n"* t'e % gn # $ant %a6 ng%

n%tantl2 92 e er en$ ng. A% *ell8!n"*n lea er n l"*8$"%t? ra l2? t'e e l"2,ent% "# t"!en

* t' large8%$ale? T/S8 T"!en /e l"2,ent Ser6 $e% r"6 e% a r"ll " t " t "n% * t' l a9le range

*' $' n$l e% a a$!age?

Organ e %er6 $e% t" a r"gra, an t" en %er% %' t"!en% are re$te . Ot'er* %e? %ele$t t"

%et 92 "*n 9ran$'e% "r reg "nal "## $e%.


24/36

S'" l 2" re$e 6e % $' an e,a l? lea%e /O NOT #"ll"* t'e n%tr $t "n%? %ele$t t'e l n! "r

re% "n . 4e ne6er a%! $ %t",er% t" re8reg %ter %e$ r t2 eta l% 92 e,a l.

S $' e8,a l% are an atte, t t" "9ta n 2" r Onl ne Ban! ng l"g n eta l% n "r er t" re,"6e

# n % #r", 2" r 9an! a$$" nt%. S'" l 2" re$e 6e an e,a l l !e t' %? " n"t re% "n an

$"nta$t % at 7(5 073& -73&.

"lea!e Re)e)'er

Ne6er rea$t 6ate 2" r a$$" nt "r n t 2" r %e$ r t2 n#"r,at "n nle%% * t' n t'e %e$ re P'"ne

"r Onl ne 9an! ng en6 r"n,ent.

4'en 2" l"g n t" Onl ne Ban! ng 2" * ll 9e a%!e t" enter 2" r reg %trat "n n ,9er ant'ree ran ", g t%? ne6er all # 6e? #r", 2" r Per%"nal A$$e%% C" e PAC an t'e la%t #" r

g t% #r", "ne "# t'e %et "# n @ e er%"nal eta l% r"6 e 92 2" at n t al reg %trat "n.

Al&a(! kee* (our log in detail! con idential

O r Onl ne Ban! ng *e9% te %e% t" ate %e$ r t2 %2%te,% t" r"te$t " r $ %t",er% # nan$ al

an er%"nal ata. Y" r art n ,a nta n ng t' % $"n# ent al t2 % t" en% re t'at 2" !ee 2" r

l"g n eta l% %e$ret.

4e 'a6e a %e$ re l"g n r"$e%% an 8t"8 ate en$r2 t "n t'at re6ent% an2"ne #r", a$$e%% ng

2" r a$$" nt "nl ne "r 6 e* ng eta l% *' l%t n tran% t 9et*een 2" r PC an t'e 9an! %er6er.

Securit( "olic(

T'e #"ll"* ng n#"r,at "n % t" 'el 2" n er%tan ,"re a9" t t'e %e$ r t2 #eat re% "# Onl ne

Ban! ng.

Introduction

T'e Internet % a $"lle$t "n "# ,an2 $", ter% l n!e t"get'er 92 a 9l $ net*"r! t'at % an% t'e

gl"9e. It *"r!% 92 %en ng n#"r,at "n #r", $", ter t" $", ter a$r"%% t'e net*"r! nt l t'e

24


25/36

n#"r,at "n rea$'e% t% e%t nat "n. 4'en ata % %ent #r", "ne $", ter t" an"t'er? e6er2

$", ter n 9et*een 'a% t'e "%% 9 l t2 "# l""! ng at *'at % 9e ng %ent.

T' % % n"t a r"9le, #"r ,an2 "# t'e a$t 6 t e% t'at ta!e la$e % ng t'e Internet. H"*e6er? # *e

*ant t" !ee n#"r,at "n r 6ate *e , %t ta!e e tra re$a t "n%. T'e #"ll"* ng n#"r,at "n * ll

g 6e ,"re n#"r,at "n "n t'e %e$ r t2 "# t'e Onl ne 9an! ng %2%te,% an '"* t" get %e$ r t2

n#"r,at "n r 6atel2 an '"* t" get 9e%t ra$t $e% t" get ' g' le6el %e$ r t2 t" t'e 9an! ng

%2%te,%. St ll t'ere %" ,an2 %e$ r t2 6 "lat "n% are 'a en ng *' le % ng "nl ne 9an! ng %2%te,

n a 9l $ %2te,.

O er ie& o Securit(

Onl ne Ban! ng n$"r "rate% %e6eral la2er% "# te$'n"l"g2 t" en% re t'e $"n# ent al t2 an

ntegr t2 "# t% tran%a$t "n% a$r"%% t'e Internet.

1. T'e SSL Pr"t"$"l Se$ re S"$!et% La2er % %e t" en$r2 t %$ra,9le an2 n#"r,at "n a% t

tra6el% 9et*een 2" r 9r"*%er an t'e 9an! %er6er? ,ean ng t'at t'e n#"r,at "n $ann"t 9e rea

*' l%t en8r" te. Y" $an $'e$! t" %ee # SSL % n %e 92 l""! ng #"r t'e a l"$! "n t'e 9r"*%er

an 92 $'e$! ng t'at t'e $"rre$t *e9 a re%%? %tart ng * t' 'tt %: % %'"*n n t'e 9r"*%er a re%%

# el .$. / g tal Cert # $ate%? ele$tr"n $ # le% *' $' $"n# r, t'e a t'ent $ t2 "# a *e9% te? are %e t"

all"* 2" t" 6er #2 t'at 2" r 9r"*%er % $",, n $at ng * t' t'e 9an! *e9 %er6er.

-. A %er % reg %trat "n n ,9er? PAC Per%"nal A$$e%% C" e ? C" e Car an "t'er er%"nal

eta l% are al%" %e t" a t'ent $ate $ %t",er l"g n%.

On$e 2" rea t'r" g' t'e #"ll"* ng %e$t "n% 2" * ll %ee '"* ea%2 t % t" %e t'e %er6 $e n a

%e$ re ,anner.

T#e Internet

T'e Internet % #re@ entl2 ll %trate a% a $l" *'en %'"*n a% a $t re. T' % % 9e$a %e t % n"t

"%% 9le t" $"ntr"l e a$tl2 *'at r" te % ta!en *'en n#"r,at "n % $",, n $ate 9et*een "ne

25


26/36

$", ter an an"t'er a$r"%% t'e Internet. In#"r,at "n ,a2 a%% t'r" g' ,an2 "t'er $", ter%

"n t'e nternet a% t tra6el% 9et*een 2" r $", ter an t'e 9an! *e9 %er6er

Your Bro&!er

T" %e Onl ne Ban! ng 2" , %t 'a6e a$$e%% t" t'e nternet an 'a6e an nternet 9r"*%er

n%talle "n 2" r $", ter. T'ere are a n ,9er "# ##erent 9r"*%er% a6a la9le "# *' $'

) $r"%"#t Internet E l"rer an )" lla F re#" are t'e ,"%t " lar. 4e re$",,en t'at 2"

%e t'e ,"%t re$ent 6er% "n "# 2" r 9r"*%er a% t * ll r"6 e 2" * t' 9etter %e$ r t2 an

$"ntr"l #eat re%. S",e "l er 6er% "n% "# 9r"*%er% * ll n"t *"r! * t' " r %er6 $e? a% t'e2 " n"t

% "rt t'e re@ re %e$ r t2 #eat re%.

Onl ne Ban! ng % e% gne t" *"r! * t' all 9r"*%er% t'at % "rt #ra,e% an % "rt t'e SSL r"t"$"l. It % a 6 %a9le t" %e a ,"re t" ate 6er% "n "# 2" r 9r"*%er? a% t %'" l n$l e

t'e%e $a a9 l t e%. In a t "n? ,"re t" ate 6er% "n% * ll n$l e ate%? !n"*n a% %"#t*are

at$'e%? *' $' 'el re6ent $r , nal% #r", a$$e%% ng %en% t 6e ata #r", 2" r PC. )"%t 'a6e an

a t",at $ ate #a$ l t2 *' $' en% re% t'at ne* at$'e% are a l e a% %""n a% t'e2 are

a6a la9le? t % * %e t" en% re t' % #eat re % ena9le . T'e #"ll"* ng %e$t "n eta l% %",e "# t'e

*a2% n *' $' 2" r 9r"*%er $an 'el 2" t" !ee 2" r n#"r,at "n %e$ re.

S",e 9r"*%er% * ll al%" "##er t" re,e,9er 2" r l"g n eta l%. It % n"t re$",,en e t'at 2"

ta!e a 6antage "# t' % "##er e% e$ all2 # % ng a $", ter *' $' % %'are .

Our :e' Ser er

T'e 9an! 'a% a $", ter "r Q*e9 %er6erQ $"nne$te t" t'e nternet t'at eal% %e$ rel2 * t' t'e

re@ e%t% #"r n#"r,at "n an %er6 $e% 2" ,a!e % ng Onl ne Ban! ng. T' % *e9 %er6er % al%"

r"te$te 92 la2er% "# %e$ r t2 n$l ng F re*all an Ant 8 r % %2%te,%.

Cac#ing

Ca$' ng % t'e ter, n"l"g2 %e t" e%$r 9e t'e r"$e%% "# te, "rar l2 %t"r ng n#"r,at "n e t'er

n 2" r $", ter % te, "rar2 ,e,"r2 RA) "r t% 'ar r 6e %" t'at % $an 9e retr e6e ,"re

%* #tl2 # re@ re aga n. 4'en 2" 6 e* a age "n t'e nternet? 2" r 9r"*%er ,a2 !ee a $" 2

26


27/36

"# t'at n#"r,at "n n 2" r $", ter% $a$'e rat'er t'an 'a6e t" re@ e%t t'e n#"r,at "n aga n

#r", t'e *e9 %er6er.

:#( &orr( a'out cac#ing;

I# 2" r 9r"*%er %t"re% age% "n 2" r 'ar r 6e n "r er t" r", tl2 retr e6e t'e, at a later

%tage? t % "%% 9le t'e age% $an 9e 6 e*e 92 %",e9" 2 el%e % ng t'e %a,e $", ter. I# 2"

%'are a $", ter "r 2" r $a$'e % %t"re "n a %'are 'ar r 6e t'en "t'er e" le ,a2 9e a9le t"

6 e* eta l% "# 2" r a$$" nt%.

Cac#ing !ecure *age!

A %e$ re age % a age *' $' 'a% 9een el 6ere t" 2" r 9r"*%er % ng t'e SSL en$r2 t "n r"t"$"l. On$e 2" r 9r"*%er 'a% e%ta9l %'e a %e$ re %e%% "n * t' t'e %er6 $e? all age% * ll 9e

%e$ re age%. Un er n"r,al $ r$ ,%tan$e% 2" r 9r"*%er * ll n"t $a$'e t'e%e %e$ re age%.

T'e 9an! *e9 %er6er %e% a %tan ar $",,an n%tr $t ng 9r"*%er% n"t t" $a$'e t'e %e$ re

age%. It % "%% 9le t" "6err e t' % $",,an 92 % ng %ett ng% "n 2" r 9r"*%er. 4e %tr"ngl2

a 6 %e t'at 2" " n"t $"n# g re 2" r 9r"*%er t" $a$'e %e$ re age%. )"re re$ent 6er% "n% "#

9r"*%er% all"* 2" t" " t' % *' le "l er 6er% "n% ,a2 n"t 'a6e t' % " t "n.

Cookie!

A $""! e % a e$e "# n#"r,at "n t'at t'e 9an! %er6er g 6e% t" 2" r 9r"*%er "n$e 2" r 9r"*%er

'a% e%ta9l %'e a %e$ re %e%% "n. 4 t'" t t'e $""! e ata? 2" *" l 'a6e t" l"g n e6er2 t ,e

2" r 9r"*%er re@ e%te an2 n#"r,at "n #r", t'e 9an! *e9 %er6er.

4'en 2" ' t t'e l"g " t 9 tt"n t" lea6e t'e %er6 $e? t'e $""! e ata % elete #r", t'e %2%te,

t'ere#"re 9rea! ng t'e l n! 9et*een 2" r PC an t'e 9an! *e9 %er6er. Sele$t ng l"g " t en% re%

t'at 2" %e$ rel2 ter, nate t'e %er6 $e.

Ti)eout!

27


28/36

I# t'ere % n" %er6 $e a$t 6 t2 #"r # 6e , n te% t'en t'e %e%% "n * ll e re an t'e 9r"*%er * ll

% la2 a ne* age g 6 ng t'e " t "n t" e t "r l"g n aga n. /" n"t lea6e 2" r $", ter

natten e *' le % gne "nt" t'e %er6 $e? e% e$ all2 # % ng a 9l $ nternet #a$ l t2.

Log out

Al*a2% # n %' 2" r %e%% "n 92 %ele$t ng l"g " t. T' % * ll en% re t'at 2" r %e%% "n * t' t'e 9an!

%er6er 'a% ter, nate %e$ rel2.

Su))ar(

T'e r "%e "# t' % "l $2 % t" r"6 e an "6er6 e* "# t'e %e$ r t2 #eat re% "# " r Onl ne

Ban! ng %er6 $e. T'e #"ll"* ng %te % * ll 'el 2" t" %e " r %er6 $e * t' $"n# en$e.

En% re t'at 2" $"nne$t t" t'e $"rre$t *e9% te a re%% 8

En% re t'at 2" r 9r"*%er n $ate% a %e$ re %e%% "n? $'e$! #"r t'e a l"$! an 'tt % at t'e

%tart "# t'e a re%%.

En% re t'at 2" %ele$t l"g " t *'en 2" # n %'.

Kee 2" r reg %trat "n n ,9er an Per%"nal A$$e%% C" e PAC %e$ret.

Kee 2" r $" e $ar %a#e an " n"t g 6e t t" an2"ne el%e.

Ta!e $are "# 2" r n#"r,at "n "n$e t 'a% 9een el 6ere t" 2" r 9r"*%er.

Ti)e or ne=t generation >Online Banking>

In a 'a% an ntere%t ng e,"gra '2 * t' 1.1; 9 ll "n e" le? * t' l ttle "6er (+ er $ent l 6 ngn t'e r9an reg "n. A9" t -& er $ent #all

28


29/36

n er t'e ,9rella "# a lt%? * t' a ,e an age "# (+. T'e "nl ne *"rl n In a % gr"* ng

ra l2 an t $ rrentl2 %tan % at "6er 57 , ll "n a$t 6e %er% a% er Internet 4"rl Stat% U%age

an " lat "n %tat %t $% U ate ne 37? (770 .

Aga n? n t'e $"nte t "# 9an! ng? t'e %tat %t $% n $ate t'at t'e age gr" 9et*een 15 8 3&

", nate% "nl ne %age. T' % a," nt% t" "6er 00 "# a 9an!% "nl ne %er 9a%e a% er Ale a? t'e

*e9 n#"r,at "n $", an2 . Clearl2? a %tr"ng n $at"r "# t'e 2" nger t'e ne t generat "n

gear ng t" ta!e "n t'e "nl ne *"rl ? n 9an! ng % a$e.

Ban! ng % a$e n In a % @ te $", et t 6e * t' a , e 9ag "# , lt 8nat "nal>#"re gn 9an!% an

In an Nat "nal e >Pr 6at e Ban!%. F"re gn 9an!% 'a6e t'e a 6antage "# te$'n"l"g $all2

9e ng a 6an$e $", are t" t'e nat "nal e 9an!% n In a. MC"re Ban! ng S2%te,%< 'a6e 9eenn 6"g e * t' #"re gn 9an!% #"r a *' le n"*.

C"re Ban! ng % a ter, %e t" e%$r 9e t'e %er6 $e% r"6 e 92 a net*"r!e %et "# 9an!

9ran$'e% n a $entral e ," e. 4 t' $"re 9an! ng n la$e? a reta l 9an!er * ll 9e a9le t"

" erate a$$e%% # n % er#"r, tran%a$t "n% a$r"%% an2 "# t'e 9ran$'e% "# a 9an!. In a t "n?

"nl ne 9an! ng " erate% "n t" "# $"re 9an! ng an 9e$",e% t'e #a$e "# a 9an! n t'e "nl ne

*"rl .

Fr", an In an Nat "nal e Ban! er% e$t 6e? $"re 9an! ng % n erg" ng , le,entat "n%

a$r"%% In a? * t' %",e 9an!% e$lar ng 177 er$ent $"re 9an! ng D %t t' % 2ear. On t'e $"ntrar2?

r 6ate %e$t"r 9an!% n In a "e% ,at$' t" t'e l !e% "# a #"re gn 9an! n ter,% "# t'e

te$'n"l"g2 r 6en %er6 $e% l !e MOnl ne Ban! ng


30/36

9ran$'. Hen$e? Onl ne Ban! ng? 9e ng t'e #a$e "# a 9an!? % a e# n te ##erent at"r #"r t'e 2" t'

"# In a n $'""% ng a 9an!er.

% t ng a 9ran$' "n% te 'a% 9een t'e t2 $al tra t "n n In a t'at n$l e% 9alan$e>tran%a$t "n

%tat % en@ r2 a%%9""! ate. 4' le ,"%t "# t'e a$t 6 t e% "t'er t'an $a%' * t' ra*al% $an

'a en "6er t'e ele$tr"n $ "nl ne ,e ,? 6a%t ,aD"r t2 $"nt n e t" re#er "n% te re%en$e.

T' % tra t "n % % re t" 9e " t %tage a% t'e "nl ne ,e , ta!e% $enter %tage t" t'e l !e% "# t'e

ne t generat "n. Ban!er% re%"rt ng t" "nl ne ,e , *" l al%" e$"nge%t t'e "n% te 9ran$'

re, %e%? t' % a6 ng *a2 #"r 'an l ng $r t $al tran%a$t "n% an %er6 $e% at t'e 9ran$'e%.

Re $e "n% te tra## $ al%" ,ean% t'at t'e % "rt er%"nnel "# a 9an! $an $'annel e t'e r t ,e

an energ2 % %er6 ng $ %t",er% *'" reall2 nee attent "n.

Internet 9an! ng %er% e e$t t" " erate n a MSel# Ser6 $e< ," e? *' $' % a , $' e% re %tate

t" 9e n. T'e 2" nger generat "n % gett ng %,arter a2 92 a2 an e% re t" ,anage t'e r

# nan$e% ta!e ta$t $al n6e%t,ent e$ % "n% "nl ne. In a t "n? t'ere % a 9 rn ng e% re t" 6 e*

t'e $", lete "rt#"l " "# "ne% a%%"$ at "n * t' a 9an!. T'e%e a% e$t% are %t ll 2et t" ta!e %'a e

"nl ne.

4' le %",e 9an!% , g't arg e t'at t'e2 r"6 e #la6"r "# % $' %er6 $e% "nl ne? t'e %age?

#ee 9a$! an re% "n%e % *"rt' ta! ng a n"te. 4e are %t ll lag e 92 %% e% n t'e area "#

r"6 ng n # e a$$e%% t" 6ar " % a$$" nt% 'el 92 an n 6 al? %er6 $e a6a la9 l t2? ea%

na6 gat "n>a$$e%%. N"ne "# t'e 9an!% t'at " erate n In a? n$l ng , lt 8nat "nal 9an!% $",e

$l"%e t" "##er ng 6al e a e %er6 $e% "nl ne.

M al e A e Ser6 $e%< n$l e "rt#"l " ,anage,ent? % en ng tren %? % en tra$! ng an

anal2% %? anal2t $% "n n 6 al$al$ lat"r% t'at ena9le n 6 al% t

ta!e ta$t $al n6e%t,ent e$ % "n% "nl ne.

All t'e%e %'" l 9e re%ente "nl ne * t' t,"%t , "rtan$e t" %er e er en$e #"r %er% * t'

l"*8a6erage8' g' 9r"*% ng !n"*le ge. T'e%e %er6 $e% *' $' are "##ere ,"%tl2 "n re, %e n

30


31/36

t'e na,e "# *ealt' ,anage,ent %er6 $e% $erta nl2 $an g" "nl ne a% a$$e%% 9 l t2 "# Internet 'a%

,a e n 6 al% e,an % $' %er6 $e% "nl ne. S""ner "r later? #"r a 9an! t" %tan " t a% a

e% re 9ran "r 9an!er #"r t'e generat "n% t" $",e? % $' a% e$t% 'a6e t" 9e l""!e nt" an

r","te t% %age.

4' le Re%er6e Ban! "# In a


32/36

Alrea 2 l 6e at t'e # r%t $l ent? ) %2% Per%"nal F nan$e P"rtal el 6er% a %e$ re? r"9 %t? an

%$ala9le "nl ne 9an! ng %"l t "n #"r reta l 9an! ng $ %t",er%. In a t "n t" t'e %tan ar Internet

9an! ng #eat re%? % $' a% 9alan$e $'e$! ng? 9 ll a2,ent? # n tran%#er% an "nl ne %tate,ent%?

t'e %"l t "n n$l e% nn"6at 6e #eat re% e% gne t" 'el 9an!% ,a , e t'e a " t "n "# "nl ne

9an! ng a,"ng t'e r er%"nal 9an! ng $ %t",er%.

) %2% Per%"nal F nan$e P"rtal n$l e% a re8 a$!age %er8 nter#a$e e% gne t" 9e nt t 6e

an $ %t", a9le. C %t",er% $an a$$e%% all t'e r a$$" nt% an er#"r, t'e ,"%t $",,"n ta%!%

#r", a % ngle %er6 $e? g 6 ng t'e, 9etter $"ntr"l an 6 % 9 l t2 "# t'e r # nan$e%. Ban!% $an al%"

9ran an $ %t", e t'e %tr $t re an #"r,at "# t'e age% t" ,at$' t'e ##erent nee % "# t'e r

$ %t",er %eg,ent%.

C %t",er% are % "rte t'r" g'" t t'e "nl ne 9an! ng e er en$e * t' $", re'en% 6e an

e ta9le "nl ne 'el ? FA age%? real8t ,e 6al at "n "# t'e ata t'e2 enter an $ %t",er% al%"

'a6e t'e " t "n t" %en , lt le t2 e% "# tran%a$t "n% "r %e$ re ,e%%age% t" t'e r 9an!.

) %2% Per%"nal F nan$e P"rtal "##er% a tr e en'an$e,ent "6er 9ran$' an tele '"ne 9an! ng?

ena9l ng $ %t",er% t" %el#8%er6 $e "nl ne #"r a * e range "# ta%!%? % $' a% %t" ng a2,ent%?

$'e$! ng a2,ent %tat %? $'e$! ng tran%a$t "n ' %t"r e%? ,anag ng l %t% "# e" le an

"rgan at "n% t'e2 a2 reg larl2? %$'e l ng re$ rr ng a2,ent% % $' a% re$t e9 t% an%tan ng "r er%? %ett ng8 S)S an e,a l alert%? re "rt ng l"%t $ar % "r $'ang ng a%%*"r %.

QT'e te$'n"l"g2 9e' n "nl ne 9an! ng re%ent% 9an!% * t' an n arallele " "rt n t2 t" ta l"r

t'e 9an! ng e er en$e t" ,eet t'e r $ %t",er% nee %. ) %2% Per%"nal F nan$e P"rtal? t'e ne*

,e,9er "# " r #a, l2 "# %"l t "n% "*ere 92 " r n 6er%al "rtal lat#"r,? $an 9e er%"nal e

t" ,at$' % $' nee %. N"t "nl2 % t'e %"l t "n , lt 8l ng al n$l ng " 9le892te $'ara$ter %et%

an % "rt% a * e range "# 9an! ng r" $t%? 9 t t $an al%" 9e %e 92 t'e 9an! a% a

,ar!et ng $'annel t" ,a!e % e$ # $ n"n8tran%a$t "nal n#"r,at "n? ,e%%age% "r ne*% #ee %a6a la9le t" ea$' $ %t",er t2 e.Q

) %2% Per%"nal F nan$e P"rtal 'a% 9een e6el" e "n ) %2% ,ar!et8lea ng "rtal te$'n"l"g2?

*' $' ,ean% t $an 9e %ea,le%%l2 ntegrate nt" t'e # ll range "# ) %2% $"re89an! ng an "rtal

a l $at "n%? n$l ng ) %2% Tra e P"rtal? ) %2% Ca%' P"rtal an ) %2% )"9 le.32


33/36

?. Conclu!ion7

T' % Pa er e%$r 9e% a9" t "nl ne 9an! ng ,a nl2 a9" t %e$ r t2 te%t ng t"*ar $l ent % e?

,"%tl2 $"n$entrate "n %",e "# $ateg"r e% an $r ter a * t' a r"a$'e% an !n"* ng '"* a

te%t ng %2%te, * t' $", l an$e 'a% t" e% gn n $a%e "# %e$ r t2 "# "nl ne 9an! ng? It n6"l6e%$erta n r %!% %" t'at t % , "rtant t" e $ate a9" t #a$ ng t'e%e r %!% *' $' are na t'"r e n

# nan$ al n#"r,at "n an r"te$t t'r" g' %e$ r t2 a% *ell a% $"n% ,er 'a% enta l a9" t %",e

re% "n% 9 l t e% an r g't% $"n$ern a9" t 9an! ng. 4e lanne #"r %e$ r t2 "n te%t ng 9a%e * t'

nternat "nal %tan ar % n %e$ r t2 an "l $ e% n *' $' e6el" er% an te%ter% are g"" en" g'

t" 'an le t'e%e %e$ r t2 %te % an nee t" %e ##erent %te % t" , r"6e %e$ r t2 #r", t'e $l ent

%2%te, % e. T" , r"6e C %t",er $"n# en$e *' le er#"r, t'e "nl ne tran%a$t "n% t en% re%

%",e %e$ r t2 re@ re,ent% t" , r"6e %e$ r t2 aga n%t t'e atta$!% #r", t'e na t'"r e

er%"n%.

@. UTURE :ORKS75

Here *e * ll e%$r 9e t'e r"9le,% "# t'e Onl ne 9an! ng %2%te,% *' $' are #a$ ng #r", t'e

a%t an n t'e $ rrent t ,e%. T'ere % nee t" , r"6e t'e %e$ r t2 "# t'e Onl ne 9an! ng

%2%te,% at t'e % e "# t'e $l ent. %t 'e * ll " en t'e a l $at "n #r", t'e nternet #r", ' %

$", ter= 'e * ll % rel2 9el e6e t'e %2%te, "# t'e "nl ne a l $at "n. S" t % t'e re% "n% 9 l t2 "#

t'e 9an! t" r"6 e t'e %e$ r t2 t" t'e a l $at "n #r", t'e $l ent % e. Here nee t" , r"6e t'e

%tan ar % "# t'e %e$ r t2 te%t ng= 'ere %e$ r t2 la2% a ,aD"r r"le an nee t" #"ll"* ##erent

$ateg"r e% an t" $'ange t'e a r"a$' "# t'e te%t ng nter ,% "# t'e %e$ r t2.

4e are n"t %$ %% ng a9" t a % e$ # $ te%t ng t""l t'at * ll n6"l6e n t'e Onl ne Ban! ng %2%te,

te%t ng. Pre%entl2 *e are #"ll"* ng $erta n te$'n @ e% an %tan ar % #"r t'e %e$ r t2 te%t ng.

/e6el" er% an te%ter% %'" l 'a6e a $"n$entrat "n "n t'e %e$ r t2? t'en "nl2 t'e2 * ll *"r!

$"rre$tl2 t" , r"6e t'e %e$ r t2 #r", t'e er% e$t 6e "# t'e $l ent. T'e2 %'" l 'a6e g""

!n"*le ge an re%ent n#"r,at "n "n t'e %e$ r t2 te%t ng.

B2 , r"6 ng t'e %e$ r t2 "n t'e "nl ne 9an! ng %2%te,% $"n# en$e "# t'e $ %t",er% * ll

n$rea%e. T'e2 * ll 9el e6e t'e %2%te,% t" $"nt n e tran%a$t "n% t'r" g' t'e 9an! ng %2%te,%. S"

t'e 9an! * ll get g"" re tat "n. C %t",er% $" nt * ll n$rea%e e en "n t'e %e$ r t2 le6el%

#r", t'e $ %t",er % e. St ll t'e2 are tr2 ng t" e$rea%e t'e r %! #r", t'e 'a$!er% an atta$!er%.

33


34/36

Here t'e a r"a$' "# t'e $", l an$e te%t ng % a l ttle 9 t $"n$e t al e ? t'at $"nta n% a ##erent

#ra,e*"r!? t'at n$l ng t'e #"ll"* ng " nt%:8

1 Nee t" re are %",e $", l an$e te%t ng r n$ le% "# a 4e9 9a%e% %2%te, t'at %'" l 9e

e e$ te n t'e l"$al %2%te, an re,"te %2%te,. T'e te%t ng %'" l 'a6e t" " % ng %",e

##erent # le% 92 "*n l"a ng #r", t'e ##erent % te% an %e t'e $",9 nat "n% l !e l"$al

%2%te,% an Re,"te %2%te,.

( T" , r"6e t'e $a a9 l t e% "# t'e %el# te%t ng an nee t" #"ll"* t'e $",,"n $ert # $at "n

te%t ng.

3 Te%t ng *e 'a6e t" n t'e re%en$e "# t'e e#e$t% an %% e% t'en t'e2 * ll g 6e er#e$t

re% lt% '"* t" , t gate t'"%e an '"* t" , r"6e t'e @ al t2. In t'e %a,e *a2 nee t" te%t "nt'e 9an! ng %2%te,% t" te%t at t'e re%en$e "# t'e r %! at t'e %a,e t ,e a9%en$e "# t'e r %! "n

t'e "nl ne 9an! ng %2%te,. It * ll g 6e t'at *'at % t'e %e$ r t2 "l $2 t" re%ent t" t'e

$ %t",er #"r t'e r 9etter n er%tan ng.

& S",e %a9 l t2 %% e% al%" nee t" $"n% er #"r t'e $ %t",er %at %#a$t "n t'at 9etter

n er%tan %. 4e %'" l !n"* t'e ##eren$e 9et*een t'e %e$ r t2 te%t ng an %a9 l t2

te%t ng.

REFERENCES:

34


35/36

1. Arn# el ? R"9 n. Enter r %e Se$ r t2. Ban!% Get 4 %e t" P' %' ng

Fra . NewsFactor Magazine Online ? )a2

1+?(77-.'tt :>>***.ne*%#a$t"r.$",>%t"r2. 't,l %t"r2 V73377777U)LI.

(. Ban! "# A,er $a. Online Practices Privacy Policy .

'tt :>>***.9an!"#a,er $a.$",> r 6a$2> n e .$#, te,l ateV r 6a$2%e$ r "nl n.

3. Ban! "# A,er $a. Reporting & Resolving Fraud.

'tt :>>***.9an!"#a,er $a.$",> r 6a$2> n e .$#,

te, lateV r 6a$2%e$ r na t'"r %e a$$ %e.

&. Cra*#"r ? ) $'ael. S"$ al eng neer ng re la$e% g n% n t" a2>***.$", ter*"rl .$",.a > n e . ' > =;3-&+3-1&.

+. Ele$tr"n $ C" e "# Fe eral Reg lat "n% e8CFR .Title 1 ! "an#s and

"an#ing$Part % ' (lectronic Fund Trans)ers *Regulation

(+ .'tt :>>e$#r.g "a$$e%%.g"6>$g >t>te t>te t

$Ve$#r=% V117+;(35 $;5&&1;e$(5-e9;7e1531#;=rgnV 6+=6 e*Vte t=n" eV1(

3A(.7.1.1.+= n"V1(=$$Ve$#r.

-. Ele$tr"n $ C" e "# Fe eral Reg lat "n% e8CFR .Title 1,! Commercial

Practices$Part -1- ' Privacy o)

ConsumerFinancial n)ormation .'tt :>>e$#r.g "a$$e%%.g"6>$g >t>te t>te t

$Ve$#r % V$$;3#1;;a50$3 &&+5e +(10+a9#77e3 rgnV 6+ 6 e*Vte t n" eV1-:1.7.1.3.3; n"V1-.

;. Fe eral /e "% t In% ran$e C"r "rat "n. /a)e nternet

"an#ing .'tt :>>***.# $.g"6>$"n% ,er%>$"n% ,er> n e .'t,l

5. T'e Fe eral Re%er6e Ban! "# B"%t"n. P0is0ing and P0arming! elpingConsumers

2void nternet Fraud .35
http://www.bankofamerica.com/privacy/index.cfm?temlhttp://www.bankofamerica.com/privacy/index.cfm?template=privacysecur_unauthorised_acc_usehttp://www.bankofamerica.com/privacy/index.cfm?template=privacysecur_unauthorised_acc_usehttp://www.bankofamerica.com/privacy/index.cfm?temlhttp://www.bankofamerica.com/privacy/index.cfm?template=privacysecur_unauthorised_acc_usehttp://www.bankofamerica.com/privacy/index.cfm?template=privacysecur_unauthorised_acc_use


36/36

'tt :>>***.9"%.#r9."rg>$"n% ,er> ' %' 'ar,> n e .'t,.

0. Gr ,e%? R"ger A. H"* SSL8E6a ng Tr"Dan% 4"r!. n)o3orld ? )a2 1?

(77-.'tt :>>***. n#"*"rl .$",>art $le>7->7+>71>;;+1+ 15FE%%l,al*are*"r!% 1.

't,l.

17. Gr ,e%? R"ger A. E8C",,er$e n $r % %: 4'en SSL %n>***.,ar!et*at$'.$",>Ne*%>St"r2>St"r2.a% g V ;BC(5+5++38

3/778&--585+3/80BA7FC31F/07 ;/.13. ) lletar2? a%"n. Tec0nical Trends in P0is0ing

2ttac#s .'tt :>>***. %$ert.g"6>rea ng r"",> ' %' ng tren %7+11. #.

1&. T'e O## $e "# t'e C", tr"ller "# t'e C rren$2. Consumer Protection

News! nternet Pirates 2re Trying to /teal 4our Personal Financial

n)ormation .'tt :>>***."$$.g"6>$"n% ,er> ' %' ng.'t,.

1+. T'e O## $e "# t'e C", tr"ller "# t'e C rren$2. Consumer Protection News!OCC

Fig0ting dentity T0e)t .'tt :>>***."$$.g"6>C"n% ,er> t'e#t.'t,.Sa9at n ?

1-. Patr $ a. B % ne%% Ne*%. /e9 t $ar #ra gr"*%. post5gazette.com ?)a2 +? (77-.

'tt :>>***. "%t8ga ette.$",> g>7-1(+>-5;-1+8-5.%t,.

1;. S ll 6an? B"9. Onl ne Ban! ng S e$ al Re "rt. Onl ne 9an! ng #ra

$"n$ern%$ %t",er%: A$$" nt '"l er r g't% 6ar2 9a%e "n % t at "n.

M/N"C.com ?/e$e,9er 1&? (77&. 'tt :>>***.,%n9$.,%n.$",> >-;13733>.

15. S ll 6an? B"9. Onl ne Ban! ng S e$ al Re "rt. S r6e2: ( , ll "n 9an!

a$$" nt%r"99e : Cr , nal% ta! ng a 6antage "# "nl ne 9an! ng? Gartner

%a2%. M/N"C.com ? ne 1&? (77&. 'tt :>>***.,%n9$.,%n.$",> >+15&7;;>.

secuirty of online bankingjan12th

Documents