ENHANCED PROTECTION OF BANK CUSTOMER RECORDS USING ACCESS CONTROL AND HEURISTIC INTRUSION DETECTION TECHNIQUES

The advent of digital banking services has created a great need to provide better protection for the confidential records of customers from any form of unauthorized access, misuse of privilege, insider attacks, and any suspicious behavior of the user. While traditional access control policies may limit users according to certain rights, they might not be able to identify any unusual behavior by the user who is an authorized entity of the system. In this regard, this research project seeks to develop a secure banking information system that uses RBAC with IDS. The design of the system was carried out as an intranet web application based on PHP, MySQL, HTML, CSS, JavaScript, Bootstrap, and Apache using XAMPP/WAMP. The RBAC architecture was employed using authentication, session handling, role assignment, and permission validation, whereas heuristic IDS was carried out by analyzing system traces, which comprised logging activities, access pattern of resources, failed access requests, abnormal access time, retrieval of records, and escalation of privileges. Risk scoring approach was also adopted to identify any suspicious activity based on certain heuristic rules and criteria. The results suggest that combining RBAC and heuristic intrusion detection resulted in the successful prevention of any unauthorized access and detecting any abnormal behavior which might happen despite the fact that the user had a valid account. Hence, the system developed is an efficient method to secure the private data of banking customers in an intranet banking environment.