Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:

 

Human error puts online banking security at risk

08.11.2007
Using an SMS password as an added security measure for internet banking is no guarantee your money is safe, according to a new Queensland University of Technology study which reveals online customers are not protecting their accounts.

Mohammed AlZomai, from QUT's Information Security Institute, said one in five online transactions was vulnerable to obvious attacks despite added security methods such as SMS passwords being adopted.

Mr AlZomai said the study had found that the security threat had more to do with the usability of the SMS system and human error, rather than any technical security problem.

"In response to the growing threat to online banking security, most banks have implemented special methods for authenticating a transaction," he said.

"A typical method is sending a one-time-password via SMS to the customer's mobile phone for each transaction.

"This means the customer must manually copy the password from their phone in order to confirm the online transaction."

But Mr AlZomai said customers were failing to notice when the bank account number in the SMS message was not the same as the intended account number.

He said if this occurred it was a clear sign hackers had infiltrated the system.

As part of the study, QUT developed a simulated online bank and asked participants to play the role of customers and undertake a number of financial transactions using an SMS authorisation code.

Mr AlZomai said he then simulated two types of attacks - an obvious attack which was where five or more digits in the account number were altered, and a stealthy attack which was where only one digit was changed.

"It is worrisome that obvious attacks were successful in 21 per cent of cases," he said.

"And when transactions faced a stealthy attack, 61 per cent of attacks were successful."

He said this study showed that a significant number of users were unable to identify the attack.

"This is a strong indication that the SMS transaction authorisation method is vulnerable," he said.

"According to our study only 79 per cent of users would be able to avoid realistic attacks, which represents an inadequate level of security for online banking."

Mr AlZomai said while this study highlighted the importance for customers to be vigilant when they were banking online, banks also had a responsibility to their customers.

"We hope this research will allow online banks and other online service providers to be better prepared for these emerging risks."

Sandra Hutchinson | EurekAlert!
Further information:
http://www.qut.edu.au

More articles from Business and Finance:

nachricht Microtechnology industry is hiring – positive developments of past years continue
09.04.2018 | IVAM Fachverband für Mikrotechnik

nachricht RWI/ISL-Container Throughput Index with minor decline on a high overall level
20.03.2018 | RWI – Leibniz-Institut für Wirtschaftsforschung

All articles from Business and Finance >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: ScanCut project completed: laser cutting enables more intricate plug connector designs

Scientists at the Fraunhofer Institute for Laser Technology ILT have come up with a striking new addition to contact stamping technologies in the ERDF research project ScanCut. In collaboration with industry partners from North Rhine-Westphalia, the Aachen-based team of researchers developed a hybrid manufacturing process for the laser cutting of thin-walled metal strips. This new process makes it possible to fabricate even the tiniest details of contact parts in an eco-friendly, high-precision and efficient manner.

Plug connectors are tiny and, at first glance, unremarkable – yet modern vehicles would be unable to function without them. Several thousand plug connectors...

Im Focus: New Strategy Against Osteoporosis

An international research team has found a new approach that may be able to reduce bone loss in osteoporosis and maintain bone health.

Osteoporosis is the most common age-related bone disease which affects hundreds of millions of individuals worldwide. It is estimated that one in three women...

Im Focus: AI & single-cell genomics

New software predicts cell fate

Traditional single-cell sequencing methods help to reveal insights about cellular differences and functions - but they do this with static snapshots only...

Im Focus: TU Graz Researchers synthesize nanoparticles tailored for special applications

“Core-shell” clusters pave the way for new efficient nanomaterials that make catalysts, magnetic and laser sensors or measuring devices for detecting electromagnetic radiation more efficient.

Whether in innovative high-tech materials, more powerful computer chips, pharmaceuticals or in the field of renewable energies, nanoparticles – smallest...

Im Focus: Tailored light inspired by nature

An international research team with Prof. Cornelia Denz from the Institute of Applied Physics at the University of Münster develop for the first time light fields using caustics that do not change during propagation. With the new method, the physicists cleverly exploit light structures that can be seen in rainbows or when light is transmitted through drinking glasses.

Modern applications as high resolution microsopy or micro- or nanoscale material processing require customized laser beams that do not change during...

All Focus news of the innovation-report >>>

Anzeige

Anzeige

VideoLinks
Industry & Economy
Event News

“Conference on Laser Polishing – LaP 2020”: The final touches for surfaces

23.07.2020 | Event News

Conference radar for cybersecurity

21.07.2020 | Event News

Contact Tracing Apps against COVID-19: German National Academy Leopoldina hosts international virtual panel discussion

07.07.2020 | Event News

 
Latest News

Rare Earth Elements in Norwegian Fjords?

06.08.2020 | Earth Sciences

Anode material for safe batteries with a long cycle life

06.08.2020 | Power and Electrical Engineering

Turning carbon dioxide into liquid fuel

06.08.2020 | Life Sciences

VideoLinks
Science & Research
Overview of more VideoLinks >>>