Forum Moderators: buckworks
What technologies are used to develop website banks that have online banking features in them? What skills should I look for if I am to use free-lancers or hire someone?
My knowledge in web development only covers XHTML, CSS, and graphic programs. So I don't know much about developing secure websites and so. I just hear terms like SSL and so, but don't have much of an idea what is needed to develop specifically online banking websites, that's why I'm asking.
Thanks for anyone taking the time to help and give tips.
I would like to begin with creating bank's IT security policy (or study, if it is already in place).
Then:
1) Develop user (both customers and support) authentication scheme (passwords, TANs, smartcards etc)
2) Develop access control schemes (who is permitted accessing what, when and why)
3) Keep encryption in mind (SSL, stored data encryption)
4) Ensure all the actions are protocolled properly (you even might need to have a printer set up to log important trasactions on-line)
5) Develop security auditing and administration standards
It is just a common framework, implementation using a particular programming language requires also specific language knowledges, regarding security.