E-banking Overview: Concepts, Challenges and Solutions

Belbergui, Chaimaa; Elkamoun, Najib; Hilal, Rachid

doi:10.1007/s11277-020-07911-0

Cited by 50 publications

(42 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Furthermore, the findings revealed the importance of email security in all of the previously mentioned industries. This is in line with previous [129,152,153] findings. According to Kigerl [154], to guarantee the security of commercial emails, the CAN-SPAM Act should be obeyed, with the act's enforcement function being to define the standards for commercial emails transmitted between consumers and businesses to avoid email spam [113].…”

Section: Discussionsupporting

confidence: 93%

“…Finance: Because these sectors deal with valuable assets, information security policy in financial firms is a crucial part of the issue [130]. Information and information systems must be safeguarded at all stages of the banking system, since information is seen as a significant asset in this sector, and its loss can result in serious financial and reputational damages [4,129].…”

Section: Sector Information Security Policymentioning

confidence: 99%

See 1 more Smart Citation

Cybersecurity Enterprises Policies: A Comparative Study

Mishra

Alzoubi

Gill

et al. 2022

Sensors

View full text Add to dashboard Cite

Cybersecurity is a critical issue that must be prioritized not just by enterprises of all kinds, but also by national security. To safeguard an organization’s cyberenvironments, information, and communication technologies, many enterprises are investing substantially in cybersecurity these days. One part of the cyberdefense mechanism is building an enterprises’ security policies library, for consistent implementation of security controls. Significant and common cybersecurity policies of various enterprises are compared and explored in this study to provide robust and comprehensive cybersecurity knowledge that can be used in various enterprises. Several significant common security policies were identified and discussed in this comprehensive study. This study identified 10 common cybersecurity policy aspects in five enterprises: healthcare, finance, education, aviation, and e-commerce. We aimed to build a strong infrastructure in each business, and investigate the security laws and policies that apply to all businesses in each sector. Furthermore, the findings of this study reveal that the importance of cybersecurity requirements differ across multiple organizations. The choice and applicability of cybersecurity policies are determined by the type of information under control and the security requirements of organizations in relation to these policies.

show abstract

Section: Discussionsupporting

confidence: 93%

Section: Sector Information Security Policymentioning

confidence: 99%

Cybersecurity Enterprises Policies: A Comparative Study

Mishra

Alzoubi

Gill

et al. 2022

Sensors

View full text Add to dashboard Cite

show abstract

“…Chaimaa et al [88] recently published an overview of ebanking services, the available research, based mostly on outdated papers (5 years old and more). The grasp of this article is very superficial, while in contrast, our article provides a more comprehensive and deeper insight.…”

Section: B Authentication Methods In E-bankingmentioning

confidence: 99%

E-Banking Security Study—10 Years Later

et al. 2022

View full text Add to dashboard Cite

ICT security in the banking area is going through rapid changes. It is ten years since we covered the state of e-banking security, and both authentication schemes and legislation has evolved. With the Payment Services Directive (PSD2) for European Union coming into force, we believe it is a good time to update our findings. PSD2 brings new requirements for multi-factor authentication, thus it is necessary to revise compliance of currently used schemes. This work's main contribution is an overview of current authentication methods, their properties with respect to international standards, and their resistance against attacks. We further discuss the multi-factor authentication schemes composed of those methods and their compliance with the PSD2 requirements. In order to present the overview, we introduced the e-banking attacks taxonomy, which is compatible with authenticator threats from NIST Digital Identity Guidelines but has an increased level of detail with respect to the e-banking area. The available sources in this area are usually either very broad, targeted on the business executive, or focus on one particular issue or attack in greater detail. We believe our article can bridge such diverse sources by providing a comprehensive and complex tool to help with orientation in the area.

show abstract

“…Therefore, user authentication countermeasures based on biometrics have been developed, including those based on touch dynamics biometrics. Biometric characteristics are specific to the user and difficult to copy, share, and distribute [ 14 ].…”

Section: State-of-the-artmentioning

confidence: 99%

A Framework for Continuous Authentication Based on Touch Dynamics Biometrics for Mobile Banking Applications

Estrela

Albuquerque

Amaral

et al. 2021

Sensors

View full text Add to dashboard Cite

As smart devices have become commonly used to access internet banking applications, these devices constitute appealing targets for fraudsters. Impersonation attacks are an essential concern for internet banking providers. Therefore, user authentication countermeasures based on biometrics, whether physiological or behavioral, have been developed, including those based on touch dynamics biometrics. These measures take into account the unique behavior of a person when interacting with touchscreen devices, thus hindering identitification fraud because it is hard to impersonate natural user behaviors. Behavioral biometric measures also balance security and usability because they are important for human interfaces, thus requiring a measurement process that may be transparent to the user. This paper proposes an improvement to Biotouch, a supervised Machine Learning-based framework for continuous user authentication. The contributions of the proposal comprise the utilization of multiple scopes to create more resilient reasoning models and their respective datasets for the improved Biotouch framework. Another contribution highlighted is the testing of these models to evaluate the imposter False Acceptance Error (FAR). This proposal also improves the flow of data and computation within the improved framework. An evaluation of the multiple scope model proposed provides results between 90.68% and 97.05% for the harmonic mean between recall and precision (F1 Score). The percentages of unduly authenticated imposters and errors of legitimate user rejection (Equal Error Rate (EER)) are between 9.85% and 1.88% for static verification, login, user dynamics, and post-login. These results indicate the feasibility of the continuous multiple-scope authentication framework proposed as an effective layer of security for banking applications, eventually operating jointly with conventional measures such as password-based authentication.

show abstract

E-banking Overview: Concepts, Challenges and Solutions

Cited by 50 publications

References 25 publications

Cybersecurity Enterprises Policies: A Comparative Study

Cybersecurity Enterprises Policies: A Comparative Study

E-Banking Security Study—10 Years Later

A Framework for Continuous Authentication Based on Touch Dynamics Biometrics for Mobile Banking Applications

Contact Info

Product

Resources

About