...
首页> 外文期刊>Multimedia Tools and Applications >Fraud and financial crime detection model using malware forensics
【24h】

Fraud and financial crime detection model using malware forensics

机译:使用恶意软件取证的欺诈和金融犯罪检测模型

获取原文
获取原文并翻译 | 示例
           

摘要

Recently various electronic financial services are provided by development of electronic devices and communication technology. By diversified electronic financial services and channels, users of none face-to-face electronic financial transaction services continuously increase. At the same time, under financial security environment, leakage threats of inside information and security threats against financial transaction users steadily increase. Accordingly, in this paper, based on framework standards of financial transaction detection and response, digital forensics techniques that has been used to analyze system intrusion incidents traditionally is used to detect anomaly transactions that may occur in the user terminal environment during electronic financial transactions. Particularly, for the method to analyze user terminals, automated malware forensics techniques that is used as supporting tool for malware code detection and analysis is used, and for the method to detect anomaly prior behaviors and transaction patterns of users, moving average based on the statistical basis is applied. In addition, the risk point calculation model is proposed by scoring anomaly transaction cases in the detection step by items. This model logs calculated risk point results as well as maintains incident accountability, which can be utilized as basic data for establishing security incident response and security policies.
机译:近来,随着电子设备和通信技术的发展,提供了各种电子金融服务。通过多元化的电子金融服务和渠道,没有面对面的电子金融交易服务的用户不断增加。同时,在金融安全环境下,内部信息的泄漏威胁和对金融交易用户的安全威胁稳步增长。因此,在本文中,基于金融交易检测和响应的框架标准,传统上用于分析系统入侵事件的数字取证技术被用于检测电子金融交易过程中可能在用户终端环境中发生的异常交易。特别地,对于分析用户终端的方法,使用用作恶意软件代码检测和分析的支持工具的自动化恶意软件取证技术,并且对于检测用户的异常先验行为和交易模式的方法,基于统计的移动平均值。应用基础。另外,提出了通过逐项对异常交易案例进行评分的风险点计算模型。该模型记录计算出的风险点结果并维护事件责任制,可用作建立安全事件响应和安全策略的基本数据。

著录项

  • 来源
    《Multimedia Tools and Applications》 |2014年第2期|479-496|共18页
  • 作者单位

    Korea University, CIST(Center for Information Security and Technologies), 145 Anam-dong 5-ga, Seongbuk-gu, Seoul, Korea;

    Department of Computer Engineering, Catholic University of Pusan, #57, Oryundae-ro, Gcumjeong-gu, Busan 609-757, Korea;

    Department of Cyber Security, Far East University, Wangjang-ri, Gamgok-mycon, Eumseong-gun, Chungbuk 369-700, Korea;

    Korea University, CIST(Center for Information Security and Technologies), 145 Anam-dong 5-ga, Seongbuk-gu, Seoul, Korea;

  • 收录信息
  • 原文格式 PDF
  • 正文语种 eng
  • 中图分类
  • 关键词

    Fraud detection; Electronic financial transaction; Malware forensics;

    机译:欺诈识别;电子金融交易;恶意软件取证;

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号