Framework for Threat Analysis and Attack Modelling of Network Security Protocols

Motivation

With advancements in the technology, most of the tasks that were supposed to be done by humans are now getting done by computers. Such evolution has begun a new era wherein everything is computerized including day-to-day tasks. To boost the performance organizations have changed their way of doing operations from physical way to digitization. Banking systems provides various ways with which a user can communicate with the bank from any remote location. User can transfer, deposit money with just a click.

Also, a user can access his confidential information from any location. However, this increases the chance of misusing the intellectual data by breaching the security by hackers. With technology evolutions, it becomes difficult to maintain user's intellectual information safe as it may be stored at remote locations. So, securing such remote storage from hackers becomes an ultimate goal for the organizations. Hackers or attackers can enter into the system and steal the information or can manipulate the sensitive data. Hackers make use of various techniques with which they can enter into the system illegally and achieve their goal. In sensitive areas like banking security is of great importance, because if someone hacks the net-banking passwords then he can do whatever with the account. Security thus becomes the most important issue in such sectors.

Developing a perfect secured system is not possible, because:

• •

  Most of the security systems have some limitations

• •

  Possibility abuses by privileged users inside the organization

• •

  Not all kinds of intrusions are known

• •

  A system cannot detect all types of attacks fully

Therefore, there must be a system which will be able to detect any kind of security breach and will ensure security. Quick detection of intrusion can save the intellectual data from being stolen and can alert the user if any hacker tries to attempt such intrusions.

Hence, the authors are developing an Intrusion Detection system which is capable of detecting any type of intrusion within short time and which alerts the user about the security breaches so that user can prevent any further data loss.