PROJECT TITLE :

Modeling and Verification of Online Shopping Business Processes by Considering Malicious Behavior Patterns

ABSTRACT:

Recently, on-line looking integrating third-party payment platforms (TPPs) introduces new security challenges because of complex interactions between Application Programming Interfaces (APIs) of Merchants and TPPs. Malicious purchasers might exploit security vulnerabilities by calling APIs in an arbitrary order or enjoying various roles. To deal with the security issue in the first stages of system development, this paper presents a formal methodology for modeling and verification of online searching business processes with malicious behavior patterns considered based mostly on Petri nets. We tend to propose a formal model known as E-commerce Business Method Net to model a normal on-line searching business process that represent supposed functions, and malicious behavior patterns representing a possible attack that violates the security goals at the need analysis section. Then, we have a tendency to synthesize the traditional business method and malicious behavior patterns by an incremental modeling method. In line with the artificial model, we tend to analyze whether an online looking business method is immune to the known malicious behavior patterns. Hence, our approach can create the software style provably secured from the malicious attacks at method design time and, thus, reduces the issue and value of modification for imperfect systems at the release section. We demonstrate our approach through a case study.