Enhancing Cloud Banking Security: Detection of Distributed Web Attacks through Random Forest Algorithm

Abstract

The advent of the digital era has brought unprecedented convenience and efficiency to the banking sector. However, it has also exposed financial institutions to a multitude of cyber threats. In particular, the increasing value of banking information in the digital realm has made it an attractive target for malicious actors. The repercussions of successful hacking attempts on these systems can be severe, ranging from financial losses to compromised customer data and erosion of trust in the banking sector. Consequently, bolstering the security of banking systems has become a paramount concern. This paper undertakes a comprehensive analysis of the security landscape surrounding financial organizations by leveraging a bank dataset comprising 15,000 samples and 38 variables. Through rigorous data analysis techniques, the dataset is utilized to train a Random Forest algorithm, which is then employed to evaluate and identify Distributed Denial-of-Service (DDoS) attacks launched against financial institutions. The results of this study are highly promising, as the Random Forest algorithm achieves an impressive accuracy rate of 99% in identifying potential security flaws. By providing valuable insights and empirical evidence, this research contributes to the existing body of knowledge in the field of cyber security, specifically concerning the detection and prevention of DDoS attacks in financial organizations.

Country : Lebanon

1 Rafal Sattar Jabbar2 Mohamad Tawfik Hamze

  1. Computer Science, Faculty of Science & Literature, American University of Culture and Education, Beirut, Lebanon
  2. Computer Science, Faculty of Science & Literature, American University of Culture and Education, Beirut, Lebanon

IRJIET, Volume 7, Issue 6, June 2023 pp. 185-194

doi.org/10.47001/IRJIET/2023.706029

References

  1. European network for network and information security. Good practices and recommendations for secure use of cloud computing in the finance sector. December 2015. Available from: [link].
  2. Cloud Security Alliance. The Treacherous 12: Cloud Computing Top threats in 2016. Available from: [link]
  3. Pedregosa F, Varoquaux G, Gramfort A, Michel V, Thirion B, Grisel O, Blondel M, Prettenhofer P, Weiss R, Dubourg V, et al. Scikit-learn: Machine learning in python. Journal of machine learning research. 2011;12(Oct):2825-2830.
  4. Achar S. Security of Accounting Data in Cloud Computing: A Conceptual Review. Asian Accounting and Auditing Advancement. 2018; 9(1):60-72.
  5. Abdelrafe Elzamly NM, Doheir M, Mahmoud A, AbdSamad Bin Hasan Basari NA, Ali Al-Shami SS. Adoption Of Cloud Computing Model For Managing E Banking System In Banking Organizations. International Journal Of Advanced Science And Technology. 2019; 28(1):318-326.
  6. Moustafa N, Slay J. The evaluation of network anomaly detection systems: Statistical analysis of the unsw-nb15 data set and the comparison with the kdd99 data set. Information Security Journal: A Global Perspective. 2016; 25(1-3):18-31.
  7. Panda M, Patra MR. Network intrusion detection using naive bayes. International journal of computer science and network security. 2007; 7(12):258-263.
  8. Sommer R, Paxson V. Outside the closed world: On using machine learning for network intrusion detection. In: 2010 IEEE symposium on security and privacy. IEEE; 2010. p. 305-316.
  9. Ranjit Bose XRL, Liu Y. The Roles of Security And Trust: Comparing Cloud Computing And Banking. In: The 2nd International Conference on Integrated Information 2013.
  10. Sharma DPSN, Cloud Computing Security Through Cryptography for Banking Sector. In: Proceedings of the 5th National Conference; Indiacom-2011 Computing For National Development. March 10-11, 2011. BharatiVidyapeeth's Institutes Of Computer Applications And Management, New Delhi. Copy Right Indiacom-2011.
  11. Gangal SRAA. Security Issues of Banking Adopting The Application Of Cloud Computing. International Journal Of Information Technology And Knowledge Management. 2011; 5(2):243-246.
  12. Gwara GOMS, Kimwele M. A Framework for Assessing Cloud Computing Security for Cloud Adoption In Microfinance Banks. International Journal of Advances in Computer Science and Technology. 2014; 3(1):34-38.
  13. Tesema DH. Cloud Computing Adoption Challenge In Case Of Commercial Bank Of Ethiopia. International Journal Of Development Research. January 2020; 10:33562-33565.
  14. Bawany NZ, Shamsi JA, Salah K. DDoS attack detection and mitigation using SDN: methods, practices, and solutions. Arabian Journal for Science and Engineering. 2017; 42(2):425-441.
  15. Xiao P, Qu W, Qi H, Li Z. Detecting DDoS attacks against data center with correlation analysis. Computer Communications. 2015; 67:66-74.
  16. Sommer R, Paxson V. Outside the closed world: On using machine learning for network intrusion detection. In: 2010 IEEE symposium on security and privacy. IEEE; 2010. p. 305-316.
  17. Wang B, Zheng Y, Lou W, Hou YT. DDoS attack protection in the era of cloud computing and software-defined networking. Computer Networks. 2015; 81:308-319.
  18. Tesema DH. Cloud Computing Adoption Challenge In Case Of Commercial Bank Of Ethiopia. International Journal of Development Research. January 2020; 10:33562-33565.