Internet Banking Security Research Articles

Research on Information Security Scheme Decision-Making of Internet Banking

Based on information security single item estimation and good enough security theory, decision-making of Internet banking security control proposal is researched in this paper. Internet banking security control decision-making should be executed through asset single item estimation and whole integration estimation this two layers separately. Substitutive of security proposal is discussed, which show that three steps of integration estimation should be cost option, technology feasibility option and security scheme merit rating. On the basis of cost option, technology feasibility option of security choice scheme is executed based on P2DR security theory and optimization option of security scheme is realized using fuzzy comprehensive evaluation model of improved layer analysis method.

A Formal Classification of Internet Banking Attacks and Vulnerabilities

A formal classification of attacks and vulnerabilities that affect current internet banking systems is presented along with two attacks which demonstrate the insecurity of such systems. Based ona thorough analysis of current security models, we propose a guidelines for designing secure internet banking systems which are not affected by the presented attacks and vulnerabilities .

To develop an education system for secure internet banking: GIBES

The innovations in the banking system which have been in parallel with the technological developments have presented the clients with different alternatives. One of the alternatives, internet banking, is considered very important especially for customers whose working hours coincide with those of the banks.In internet banking, even though the banks have taken the necessary precautions as to the security matter, the most important point to provide the continuity of a secure environment is the literacy of internet users. For this reason, the banks should not only secure their systems but they should also direct their users to education as to how to be conscious internet literate. In this study, why Secure Internet Banking Education System (it is named as GIBES), which is designed for internet banking users and prepared as a module for Computer Supported Education (CSE) is needed has been explained, and how the system is modeled with UML has been illustrated and GIBES is described.

Customer perceptions on Internet banking information protection

Background: South Africa has a well-developed and established banking system which compares favourably with those in many developed countries (e.g. USA), but also sets South Africa apart from many other emerging market countries like Egypt and Brazil. Four dominant banks, namely the Amalgamated Banks of South Africa (ABSA), Standard Bank, Nedcor and First National Bank (FNB) influence the South African banking environment. Internet banking has slowly been taking off in South Africa since 1996 as consumers are attracted to the convenience, safety and lower costs of doing banking online. Trust is a significant component of Internet banking and online services and products.Objectives: This article has reported on the results of a survey (a close-ended questionnaire) that was conducted by alumni of the University of Johannesburg (UJ). The research problem for this study has been formulated as ‘what are Internet banking customers’ perception on information protection when using Internet banking services and products?’Method: The methodology for this study falls on quantitative research. The research study consisted of a detailed literature review, followed by an empirical component which consisted of a quantitative questionnaire. The questionnaire used in this study consisted of eight sections covering biographical information, financial institution and Internet banking, Internet banking service quality and delivery, Internet banking functionality, Internet banking costs, Internet banking convenience and relationships, Internet banking trust and Internet banking security and information technology (IT).Results: It was established that the findings of this research could assist financial institutions with fostering and building greater value adding relationships with their customers. These value-adding endeavours will ensure that customers experience and perceive their Internet banking experience to be enriching. Education and awareness campaigns are key focus areas financial institutions should continuously invest in. Information should be easily retrievable and communicated in a manner that makes sense to the diverse customer base, especially within South Africa with its diverse cultures and languages.Conclusion: The final conclusion that could be reached is that Internet banking products and services will continue to grow across various divides and platforms as the Internet costs decrease in future, the growth of Internet related products and services such as Internet banking will increase.

Malay, Chinese, and internet banking

PurposeThe purpose of this paper is to focus on the impact of cultural traits on the intention to use internet banking. Drawing from the technology acceptance model and trust literature, the paper examines the influence of perceived ease of use, perceived usefulness, and trust on the intention to use internet banking among Malay and Chinese ethnic groups.Design/methodology/approachThe questionnaire was distributed to final year business students and Master of Business Administration students at four public universities in Malaysia. A separate multiple regression was employed to analyze the data for each ethnic group.FindingsFor both ethnic groups, the results showed that perceived usefulness, perceived ease of use, and trust, all have significant effect on the intention to use internet banking. Further examination of the regression coefficients revealed the cultural traits that may explain the extent to which they influence factors that affect the intention to use.Research limitations/implicationsRespondents of this study were students. This factor may decrease generalizability of the study because students' interest on the use of internet banking may be different from those of the general public. One research implication of this study is that there is a need to consider the role of culture in examining factors that affect behavioral intention.Practical implicationsBanks need to highlight the benefits of internet banking, make internet banking easy to use, and enhance internet banking's security to improve consumers' trust. Given the fact that culture affects one's behavior, each customer group needs to be evaluated differently and the “one‐size‐fit‐all” approach to encourage internet banking usage should be avoided.Originality/valueThis paper attempts to link cultural traits that may explain the extent to which it influences factors that affect the intention to use internet banking.

The problem with online banking

Is the culture of secrecy that surrounds internet banking security actually serving to undermine those very systems?

Communicating information systems goals: A case in internet banking security

A large part of information systems (IS) security approaches is technical in nature with less consideration on people and organizational issues. The research presented in this paper adopts a broader perspective and presents an understanding of IS security in terms of a social and organizational perspective. In doing so, it uses the communication of risk messages among the members of IT groups in setting Internet banking goals in order to identify any weaknesses in security management procedures. The novel approach of this investigation is that explores and presents the issues of risk communication and goal setting in Internet banking security through indepth interviews within three case studies. That said, it promotes an interdisciplinary and inter-organizational theory which fosters a new dialog that transcends security industry specific contexts as opposed to other studies. Interview results suggest how an effective setting of Internet banking security goals can be achieved through specific considerations for improving the communication of security messages. The research contributes to interpretive information systems with the study of risk communication and goal setting in an Internet banking security context.

Trust and Risk Communication in Setting Internet Banking Security Goals

The aim of this research is to investigate information systems security in the context of Internet banking. In doing so, it adopts a socio-organizational approach to the subject matter by investigating the interrelationship between trust and risk communication within information technology groups and their possible effect on the level of security goal setting. The research explores and describes different socio-organizational issues and seeks to demonstrate the importance of trust and risk communication in setting efficiently Internet banking goals within the broader context of information systems security management. To this end, it gives also an overview of different goal setting procedures within the IT departments of three financial institutions.

Internet banking security in the contexts of goal setting, culture and risk communication

The aim of this research is to investigate information systems security in the context of internet banking. In doing so, it adopts a non-technical approach by investigating the interrelationship and effect of culture and risk communication in setting internet banking security goals. The research explores and discusses the theories of group culture, risk communication and goal setting through a case study approach within banks based in Greece. It seeks to demonstrate the importance of culture and risk communication in setting efficiently internet banking goals within the broader context of information systems security. To this end, this research promotes an interdisciplinary and interorganisational theory which fosters a dialogue that transcends economic industry specific contexts. Ultimately, an interpretive epistemology is the mode of inquiry.

A fuzzy set-based approach for model-based Internet-banking System security risk assessment

A fuzzy set-based evaluation approach is demonstrated to assess the security risks for Internet-banking System. The Internet-banking system is semi-formally described using Unified Modeling Language (UML) to specify the behavior and state of the system on the base of analyzing the existing qualitative risk assessment methods. And a quantitative method based on fuzzy set is used to measure security risks of the system. A case study was performed on the WEB server of the Internet-banking System using fuzzy-set based assessment algorithm to quantitatively compute the security risk severity. The numeric result also provides a method to decide the most critical component which should arouse the system administrator enough attention to take the appropriate security measure or controls to alleviate the risk severity. The experiments show this method can be used to quantify the security properties for the Internet-banking System in practice.

The Social Dimensions of the Security of Internet Banking

This paper examines the users’ perspective on the security of Internet banking in Australia within the social context. This user-centered design approach supplements the technological and industrial approaches to security. The user-centered research on banking was conducted at the Royal Melbourne University of Technology University and Griffith University, both of which are part of the Smart Internet Technology Cooperative Research Centre. We conclude that the most effective way to increase the perception of Internet banking security is to increase ease of use, convenience, personalisation and trust. Without the perception of security, there will be little trust in banking and transactions on the Internet. This will impede the use of Internet banking and e-commerce which are increasingly important aspects of the nation’s critical infrastructure.

Secure Internet banking authentication

This article classifies common Internet banking authentication methods regarding potential threats and their level of security against common credential stealing and channel breaking attacks, respectively. The authors present two challenge/response Internet banking authentication solutions, one based on short-time passwords and one certificate-based, and relate them to the taxonomy above. There further outline how these solutions can be easily extended for nonrepudiation (that is, transaction signing), should more sophisticated content manipulation attacks become a real problem. Finally, they summarize their view on future requirements for secure Internet banking authentication and conclude by referencing real-live implementations

Secure internet banking with privacy enhanced mail — A protocol for reliable exchange of secured order forms

The Protocol for Reliable Exchange of Secured Order Forms is a model for securing today's favourite Internet service for business, the World-Wide Web, and its capability for exchanging order forms. Based on the PEM Internet standards (RFC 1421–1424) the protocol includes integrity of communication contents and authenticity of its origin, which allows for non-repudiation services, as well as confidentiality. It is designed to be transparent to all lower communication layer protocols including HTTP and IP. We call it an end-user oriented and document based security protocol. In the following we describe our security protocol and show how it can be used in order to perform some significant banking applications in the Web. We will compare this protocol with the existing communication security protocols like S-HTTP, SSL, and IPv6. Our prototype implementation BaKo-2 is used in an example session to illustrate the application of our protocol in a “live” person-to-person communication over the Web.