Web application security of e-money transfer systems

Other Title(s)

أمنية تطبيق الويب لأنظمة التحويل المالي الالكترونية

Dissertant

Abd al-Wahhab, Muhammad Sad

Thesis advisor

al-Hamami, Ala H.

Comitee Members

al-Jabir, Ahmad Awdah
al-Mashaqibah, firas

University

Amman Arab University

Faculty

Collage of Computer Sciences and Informatics

Department

Department of Computer Science

University Country

Jordan

Degree

Master

Degree Date

2011

English Abstract

-Information security science started to play a vital role in our life and became an important issue that used for judging on any system about either its success or failure.

E-banking applications for transferring money is considered as one of the most important applications that banks nowadays are taking care of maintaining its process validity and accuracy as a necessity for the health of the transferring process to transfer the correct amount to the right receiver.

E-money transferring process can be attacked by hackers through using different malwares and viruses for changing the transferee information and the transferring amount, one of them is called "Silent Banker”; it is considered one of the most important threat that appealed global senior banks’ concern around the world because of its high capability into penetrate the most powerful security banking systems and the ability to use different tools to do so, which cost banks large and painful losses.

This thesis was interested in proposing a solution to the “SilentBanker” problem through blocking possible security vulnerabilities that SilentBanker can penetrate the security system through.

Two suggestions were recommended for working together side by side, namely: 1.

Use the "Lock" of the browser in order to prevent any interference during the conversion process.

2.

The use of the "electronic Signature" by banks for verifying the sender identity before implementing the money transferring process.

Using the “RSA” encryption method through the "PHP Web Applications Programming Language" for websites programming was chose among all other different languages because of its dealing with servers not with user and thereby ensure that more security than other programming languages can provides.

The necessary tests were done performed this thesis to prove the validity of the proposed solutions; where prevented from entry unauthorized during process of transferring funds by the program during the test As well as the program is designed for real-time so can be deployed, or trading in this security program to global markets .

Main Subjects

Information Technology and Computer Science

Topics

• Computer networks
• Internet
• Digital currency
• Security measures

No. of Pages

120

Table of Contents

• APA
• MLA
• AMA

Language

English

Data Type

Arab Theses

Record ID

BIM-529570