A Novel Defence Mechanism Against Man-In-The-Browser Attacks Using Ais

Abstract

Man-in-the-Browser (MitB) attacks are a category of Man-in-the-Middle attacks that is considered as the topmost menace to online banking by many professionals. In MitB, a proxy trojan implants itself into the browser of the user and alters thetransactions done by the user. This trojan is imperceptible to the user and also it changes its signature making it difficult to bespotted by antivirus program. Here attackensues before encryption and after decryption in thebrowser. In this paper, an Artificial immune system (AIS) based model is proposed which uses Natural Killer Cells (NK) to alleviate the attack of MitB trojan. Here user profile is created centered on the user’s history of transactions. Two types of NK cells are created- negative selection based NK cells (NSNK) and positive selection based NK cells (PSNK). The incoming transaction details are converted to Major Histocompatibility complex (MHC1) molecules. Then it is supplied to NK cells. If it is detected by NSNK, then it may be an unauthorized transaction and three-factor authentication is applied. If MHC1 is detected by PSNK, then it is considered as authentic and the transaction is free to occur using the default two-factor authentication mechanism.