A Taxonomy of Electronic Funds Transfer Domain Intrusions and its Feasibility Converting into Ontology

Abstract

Intrusion detection systems (IDSs) in network security area has been researched for a long time. But till now, very few works concentrate on specific domains (e.g. bank systems, health services, audit industry) from a higher perspective-application level. In this paper, we give the result of our effort in this field i.e. a taxonomy of hazards in electronic funds transfer (EFT) domain is presented. In this taxonomy, characteristics and classifications of EFT threats are described, which can be benefited by domain IDS directly or can be updated into some form of ontology (e.g. OWL). For generality purpose, in building the taxonomy, we considered to use an EFT specification-Bank Internet Payment System (BIPS). After the taxonomy, we give our analysis of converting the taxonomy into ontology