Threat Analysis of Software Agents in Online Banking and Payments

Tamsanqa  Ngalo; Hannan Xiao; Bruce Christianson; Ying Zhang

doi:10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125

Threat Analysis of Software Agents in Online Banking and Payments

Tamsanqa Ngalo, Hannan Xiao, Bruce Christianson, Ying Zhang

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

176 Downloads (Pure)

Abstract

Software agents are the delegated subcontractors essential to connect the end-user to the bank and payment providers in a distributed service offering. This paper evaluates the key role that the different software agent types play to facilitate collaboration between clients and banks to perform online transactions. It highlights the threats and imminent risks that these software agents introduce in the chain as well as how these threats affect the trust relationship between principals. The discussed threats and resulting risks suggest vulnerabilities in the current software agent model which are beyond the bank and end user’s control. Both principals, the client and the service provider, are open to potential legal, security, quality of service, confidentiality and privacy compromises which influence the overarching trust relationship. There is resounding literature to illustrate advances that have been made to address the exposed challenges. However, a gap of misfortune remains where the software agent can act on its own accord exposing the contracting principals to internal and externally engineered threats thus tainting the trust relationship between these parties.

Original language	English
Title of host publication	2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)
Place of Publication	Athens, Greece
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	716-723
Number of pages	8
ISBN (Electronic)	9781538675182
ISBN (Print)	9781538675199
DOIs	https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125
Publication status	Published - 28 Oct 2018
Event	2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018) - Athens, Greece Duration: 12 Aug 2018 → 15 Aug 2018 http://cyber-science.org/2018/dasc/

Conference

Conference	2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)
Country/Territory	Greece
City	Athens
Period	12/08/18 → 15/08/18
Internet address	http://cyber-science.org/2018/dasc/

Access to Document

10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125Licence: Unspecified

Accepted_Manuscript
© 2018, IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works. This is the accepted manuscript version of a conference paper which has been published in final form at https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125
Accepted author manuscript, 190 KB

Cite this

@inproceedings{ca6f25b6b6a5473fb0786f18bd4e111b,

title = "Threat Analysis of Software Agents in Online Banking and Payments",

abstract = "Software agents are the delegated subcontractors essential to connect the end-user to the bank and payment providers in a distributed service offering. This paper evaluates the key role that the different software agent types play to facilitate collaboration between clients and banks to perform online transactions. It highlights the threats and imminent risks that these software agents introduce in the chain as well as how these threats affect the trust relationship between principals. The discussed threats and resulting risks suggest vulnerabilities in the current software agent model which are beyond the bank and end user{\textquoteright}s control. Both principals, the client and the service provider, are open to potential legal, security, quality of service, confidentiality and privacy compromises which influence the overarching trust relationship. There is resounding literature to illustrate advances that have been made to address the exposed challenges. However, a gap of misfortune remains where the software agent can act on its own accord exposing the contracting principals to internal and externally engineered threats thus tainting the trust relationship between these parties. ",

author = "Tamsanqa Ngalo and Hannan Xiao and Bruce Christianson and Ying Zhang",

note = "{\textcopyright} 2018, IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works. This is the accepted manuscript version of a conference paper which has been published in final form at https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125; 2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018) ; Conference date: 12-08-2018 Through 15-08-2018",

year = "2018",

month = oct,

day = "28",

doi = "10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125",

language = "English",

isbn = "9781538675199",

pages = "716--723",

booktitle = "2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

address = "United States",

url = "http://cyber-science.org/2018/dasc/",

}

Ngalo, T, Xiao, H, Christianson, B & Zhang, Y 2018, Threat Analysis of Software Agents in Online Banking and Payments. in 2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018). Institute of Electrical and Electronics Engineers (IEEE), Athens, Greece, pp. 716-723, 2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018), Athens, Greece, 12/08/18. https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125

Threat Analysis of Software Agents in Online Banking and Payments. / Ngalo, Tamsanqa ; Xiao, Hannan; Christianson, Bruce et al.
2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018). Athens, Greece: Institute of Electrical and Electronics Engineers (IEEE), 2018. p. 716-723.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Threat Analysis of Software Agents in Online Banking and Payments

AU - Ngalo, Tamsanqa

AU - Xiao, Hannan

AU - Christianson, Bruce

AU - Zhang, Ying

N1 - © 2018, IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works. This is the accepted manuscript version of a conference paper which has been published in final form at https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125

PY - 2018/10/28

Y1 - 2018/10/28

N2 - Software agents are the delegated subcontractors essential to connect the end-user to the bank and payment providers in a distributed service offering. This paper evaluates the key role that the different software agent types play to facilitate collaboration between clients and banks to perform online transactions. It highlights the threats and imminent risks that these software agents introduce in the chain as well as how these threats affect the trust relationship between principals. The discussed threats and resulting risks suggest vulnerabilities in the current software agent model which are beyond the bank and end user’s control. Both principals, the client and the service provider, are open to potential legal, security, quality of service, confidentiality and privacy compromises which influence the overarching trust relationship. There is resounding literature to illustrate advances that have been made to address the exposed challenges. However, a gap of misfortune remains where the software agent can act on its own accord exposing the contracting principals to internal and externally engineered threats thus tainting the trust relationship between these parties.

AB - Software agents are the delegated subcontractors essential to connect the end-user to the bank and payment providers in a distributed service offering. This paper evaluates the key role that the different software agent types play to facilitate collaboration between clients and banks to perform online transactions. It highlights the threats and imminent risks that these software agents introduce in the chain as well as how these threats affect the trust relationship between principals. The discussed threats and resulting risks suggest vulnerabilities in the current software agent model which are beyond the bank and end user’s control. Both principals, the client and the service provider, are open to potential legal, security, quality of service, confidentiality and privacy compromises which influence the overarching trust relationship. There is resounding literature to illustrate advances that have been made to address the exposed challenges. However, a gap of misfortune remains where the software agent can act on its own accord exposing the contracting principals to internal and externally engineered threats thus tainting the trust relationship between these parties.

U2 - 10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125

DO - 10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00125

M3 - Conference contribution

SN - 9781538675199

SP - 716

EP - 723

BT - 2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - Athens, Greece

T2 - 2018 IEEE 16th International Conference on Dependable, Autonomic and Secure Computing (DASC 2018)

Y2 - 12 August 2018 through 15 August 2018

ER -

Threat Analysis of Software Agents in Online Banking and Payments

Abstract

Conference

Access to Document

Fingerprint

Cite this