Designing a New Security Architecture for Online - Banking : A Hierarchical Intrusion Detection Architecture and Intrusion Detection System

Nowadays internet has a key role in interaction between peoples and their businesses (such as banking). One of domain which uses this new communication channel for more and better interacts with its customers is online-banking (OB) industry. Using of OB is increasing rapidly. the significant growth in presenting and using of OB services such as responding to customers' requests on every time and every place and additive integration, leads to fast growth in fraud events and security problems. One of solutions against to security problems into this domain is using secure protocols. Also, it is possible to add new security layers like intrusion detection to the OB security infrastructure. The main purpose of this paper is recommending to using of IDS in OB industry. This paper presents a hierarchical Intrusion Detection Architecture (IDA: it is a hierarchical architecture, including two levels i.e. deploying HIDSs on users computers, OBIDS on the central server of banking services and an NIDS on the banking network), an architecture for the proposed Online-Banking Intrusion Detection System (OBIDS: applicable in format of software/hardware/hybrid systems) and locating the deployment location of these systems on OB security architecture. Thus, it is intended to improve the security of information exchange space by adding a new defensive-aggressive layer to the OB security infrastructure and then, providing more protection of banking information and transactions (especially on insecure space of internet and other public networks).