In the recent day's web applications usage is increasing by banking, financial institutes and health or hospital management systems such as online or net banking and mobile banking, e-commerce applications, news feeds, inpatient and outpatient information etc. All these online applications require support for security properties like authentication, authorization, data confidentiality, and sensitive information leakage. The most widely accepted common method of authentication for an online application is to use a combination of alphanumeric with special characters usernames and passwords. Net or online applications should support a strong password (such as a combination of Alphanumeric with special characters).In the past recent studies reveal that the end users today have on an average approximately 10 to 15 passwords to protect their online accounts to do their actual transactions.In general, a common web (internet) user having one password may be easy to remember, but controlling many passwords for different web or internet applications is time consuming task and a security threat. Usually passwords are not secured at all as they can be guessable or somebody (a malicious user) can be stolen. To overcome this, passwords need to be stronger authentication solutions.

The number and the importance of Rich Internet Applications (RIA) have increased rapidly over the last years. At the same time, the quantity and impact of security vulnerabilities in such rich internet applications (RIA) have increasing as well. Since manual code reviews are time consuming, error prone and costly and it need skilled developers or programmers to review the manual source code review, the need for automated solutions has become evident. In this paper, we address the problem of application security vulnerable detection in Adobe Flex (Rich Internet Applications) platform in web 2.0 applications by means of static source code analysis. To this end, we present precise analysis targeted at the unique reference semantics commonly found in RIA based web applications or widgets (small applications which will run on fly i.e. drag and drop) developed in Adobe Flex Framework or Action Script 3.0. Moreover, we enhance the quality and quantity of the generated vulnerability reports.

In online aggressors regularly go for taking such client information. In these situations, malware that can take card information when they are perused by the gadget has thrived. This framework gives secure micro-payment and enhances date approaches in terms of security. In proposed system, utilize two principle capacities PUF (Physical Unclonable Function) and FRoDo(Fraud Resilient Device for Off-Line Micro-Payments). These two can be given security to installment process and client account. These produce double encryption to protect the system from attackers. In proposed system gives more security for transaction.