A comprehensive analysis of attacks on online payment schemes

作者：Zhang Lina^*; Yan Wenbin

来源：Journal of Theoretical and Applied Information Technology, 2012, 45(1): 198-204.

• Commercial bank
• Comprehensive analysis
• Design strategies
• Financial institution
• On-line banking
• On-line payment
• Prevention techniques
• Public key infrastructure
• Service provider
• Signature

When payments are to be made over the Internet, security becomes critical. The online banking system has become the preferred target of some attackers. To maintain the clients' trust and confidence in the security of the services, the financial institutions and related research workers must identify how the attackers damage the user's account and develop methods to enhance the security of the system. Based on analyzing the basic processes of online payment and the mode of attacks, the security and general prevention techniques are discussed. A complete analysis of the attack process in the transactions is given. In addition, some secure schemes and corresponding system design strategies against aggressive behaviors are proposed. This analysis and schemes are intended to be useful for commercial banks to adopt or to improve their online banking systems.

• 出版日期2012
• 单位北京大学