CHAPTER ONE

INTRODUCTION

1.1 Background of the Study

When using services in a web environment, security is of great importance especially for both

the user and the provider. The information in use must be handled in a way that does not

compromise its security. Passwords are only secured as long as the user keeps them secret.

Not everyone is aware of the risk that comes with compromised passwords and other security

leaks (Nilsson, 2012).

Lately, client side attacks on online banking and electronic commerce are on the rise due to

inadequate security awareness amongst end users. As a result, end user would not be aware if

there is vulnerability on their machine or platform that might lead to client side attack such as

man-in-the-browser (MitB) attacks. For instance, man-in-the-middle (MitM) attack

techniques which are mainly targeting the information flow between a client and a server

have now evolved to become man-in-the-browser (MitB) attack. MitM attack occurs when

someone manages to eavesdrop on web traffic by fooling the other connections (Web Server

and Client Server) to connect to the attacker instead of connecting to each other. One of the

common ways to coun