The Development And Implementation Of Online Banking Information Security System

With the rapid development of information technology and the informatization of society,online banking and electronic banking have brought great convenience to the public,and have become an indispensable part of public life.Meanwhile,how to continuously improve the security and reliability of the banking information system has come to be an important issue facing the banking industry.Starting from the main application and handling mechanism of bank's computer network,this essay analyzes the major network security problems facing the banking system and the banking system's existing computer network security technology solutions.It concludes that the defects of the present online banking system lie in the updating lag,lack of staff training and effective isolation from the internet.Then,the essay carries out a risk assessment on online banking system based on the network penetration thought by means of automated scripting,vulnerability detecting,platform summary and feedback.They are mainly divided into four modules --- information collection module,penetration enforcement module,automatically generate attack graph module and evaluation module.Further,this essay focuses on the implementation of online banking enterprise information security management center(SMC),studies SMC functional architecture,technical and logical architecture,highlighting four core management functions---the information asset risk management,security alarm management,centralized security event monitoring and safety reports,and three key modules---embedded Event module,event summary module,correlation analysis module.Finally,it introduces the procedure of the database design,maintenance,and system deployment.Through simulation experiments,we have confirmed the feasibility of the designed scheme,but factors influencing online banking security come from both internal and external,increasing the difficulty of the implementation.At the same time,because not all the equipment are in place,there will be some difficulty in fulfilling the overall program.Therefore,the applicability and usefulness of online banking security technology network still remains to be studied.