Continuing Business with Malware Infected Customers
Just happened to come across this interesting article (PDF Format) discussing how in today’s world, we (BANK preferably) need to continue business with customers even though their systems are infected with different malwares. This paper discusses many of the best practices businesses can adopt for their Web application design and back-office support processes in order to minimize this growing threat, along with helping to reduce several of the risks posed with continuing to do business customers likely to be operating infected computers.
The paper mainly focuses on the strategy that can be used to counter-fight the alarmingly increasing man-in-the-browser attack adapted by different malwares.
For ease of study and implementation, it divides best practices advice in to the following sections:
- Application flow
- Online changes
- Back-office verification
Highly recommended for those who deal with Net Banking audits and so.
