HONEYWORD :ENCRYPTION MECHANISM IN NETWORK SECURITY

Abstract

Banking systems always needs escalated security solutions. In tradition websites security measures are very low resulting easily hack able server systems. We are proposing a new All in One architecture that will guard our banking system from various attacks. Main security threats such as SQL injection attack, URL injection attack, cross site scripting, brute force attack. We will build a system that will prevent all these type of attacks. Every time a hacker tries to launch any of these attacks our system will generate a log into database. Hacker will be banned for a certain of time period. The honeywords concept is also elegant because any attacker who's able to steal a copy of a password database won't know if the information it contains is real or fake. adversary who steals a file of hashed passwords and inverts the hash function cannot tell if he has found the password or a honeyword, Jules and Rivets pointed out. The attempted use of a honeyword for login sets off an alarm. An auxiliary server (the honeychecker) can distinguish the user password from honeywords for the login routine and will set off an alarm if a honeyword is submitted. Our systems will have some unique features like user’s password will be stored in encrypted format as a honeyword. This honeyword is shared with admin. If hacker uses honeyword directly then system will ban access of hacker. System is complete Banking solution. User can transfer money to other accounts and perform other transactions.