Security Testing Handbook for Banking Applications

INTRODUCTION

Banks have always attracted wealth and crime alike. There have been numerous bank robberies, cheque frauds, etc. Before computers, banks used to fight the threat by having strong physical security and robust processes. Today the threat to banks is even greater, despite constant progress and innovation by the banks, equally matched by the criminals.

Most banking operations today have been computerised and all data is in electronic format. Banks and their branches are part of a huge network with sensitive data being sent back and forth electronically. A number of the applications used by banks are now online on the Internet. This opens up these applications and the confidential data they contain to even greater threats.

Considering ...