SEC PRJ Website Security Features by Naygas https://padlet.com/teoshuangleslie/n3n6xy76j7temol5 en-us 2020-04-24 07:15:56 UTC 2020-05-15 18:01:29 UTC hello@padlet.com Group Member: 194825p https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527622352 1)Leslie( Leader)
2)Lai Keat
3)Irfan
4)Methinee]]> 2020-04-24 07:30:12 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527622352 2FA (Two Factor Authentication) (Irfan) mohdirfansyafiq https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527625812 User needs to provide their password, and as a security measure, provide a biometric scan (face unlock or fingerprint scan) or a OTP token.]]> 2020-04-24 07:32:14 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527625812 Encryption of Login Pages(Leslie) teoshuangleslie https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527630713 Login pages uses SSL Encryption most of the time. SSL allows sensitive information such as credit card numbers and login credentials. Information entered in this page is encrypted so that its pointless for hackers who might intercept this data.]]> 2020-04-24 07:34:54 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527630713 DBS (Lai Keat) 194825p https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527634050
User ID & PIN

All iBanking users are required to have a unique iBanking PIN and User ID which they need to key in first, before accessing their account information or performing online transactions.
Your unique User ID and PIN cannot be duplicated by any other user on our system.

Multi-factor Authentication

We employ multi-factor authentication, when you perform online transactions - with a User PIN, DBS iB Secure Device and SMS OTP, for greater security.
User PIN and DBS iB Secure Device are used during your login, but SMS OTP is only used for higher risk transactions - such as funds transfer.

Automatic Logout Feature(Ok)

When our system detects that your iBanking session has been inactive for some time, you will automatically be logged out. This will prevent any unauthorised users from accessing your account.

What is Transaction Screening?

Transaction Screening is carried out with our advanced monitoring and surveillance systems, which help us to detect unauthorised activities on your accounts.They will take action as soon as possible

]]> 2020-04-24 07:36:46 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527634050 HTTPS Protocol (Leslie) teoshuangleslie https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527641755 This protocol tells visitors that they are interacting with the server and nothing else can alter or intercept the content they are viewing.]]> 2020-04-24 07:40:55 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527641755 Password Policies (Methinee) 192034W https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527642737 Create stronger passwords to reduce chances of account being compromised]]> 2020-04-24 07:41:29 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527642737 CAPTCHA (Irfan) mohdirfansyafiq https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527648146 Used as a security check to distinguish between humans and computers]]> 2020-04-24 07:44:38 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527648146 Restricting file upload (Leslie) teoshuangleslie https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527648620 If websites require file upload, there should be a certain size limitation to the file being upload so as to not cause any disruption. For extra security, files uploaded should be kept in a separate folder or database in another location.]]> 2020-04-24 07:44:54 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527648620 Backup Data (Methinee) 192034W https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527650312 You should maintain backups of all of your website files in case your site becomes inaccessible or your data is lost.]]> 2020-04-24 07:45:50 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527650312 Telegram (Lai Keat) 194825p https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527655592 1)Account Self Destruct
Telegram accounts automatically self-destruct after a period of inactivity, 1 month being the default time period. However this can be adjusted for up to 1 year after which all your databases consisting of contacts, messages and media will be wiped clean from Telegram servers. This process is irreversible.
2)Self-destruct Secret chats
Telegram’s secret chat uses end-to-end client-to-client encryption to safeguard your messages. This encryption leaves no trace on Telegram servers unlike the regular chat method. Secret chats also don’t allow forwarding messages and media and most importantly can be set to self-destruct after a specified time which can be anything from 1 second to 1 week.

Secret chats can only be accessed from the originating device to your destination unlike normal chats which are broadcast across devices. When a screenshot is taken in secret chat, both parties are notified. When you log out of your current session, your secret chats will be deleted.
3)

]]> 2020-04-24 07:48:51 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527655592 Limit User Access (Methinee) 192034W https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527663710 Limit the number of people or employees who have access to your website using minimal privilege]]> 2020-04-24 07:53:23 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527663710 Store user passwords as hash passwords(irfan) mohdirfansyafiq https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527663994 Store passwords in the server file in the form of hashes, which makes it harder to crack.]]> 2020-04-24 07:53:33 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/527663994 Yahoo(Lai Keat) 194825p https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/547184073 Type of Security feature:
1)Use Account Key for a more secure login that doesn't require a password.
Criteria: must have at least one Yahoo app installed on your mobile device and be signed in to it.

How it work:

Set up, use, and manage Yahoo Account Key to sign in without a password

Account Key is more secure and lets you use your mobile phone instead of a password to sign in. Once enabled, Yahoo sends a notification to the mobile device of your choice. You can approve access with a tap on your phone, so no one else can get into your account.

2)
Spam alerts

When yahoo detect that an email address sending you a message looks like spam, yahoo will let you know by calling it out. If you know that the email is safe, just click or tap "It's safe" and yahoo won't bother you again. If you have any doubts, click or tap "Report as Spam" and yahoo will take care of it from there as
Spam email might contain malicious link that might affect the victim

]]> 2020-05-03 16:47:07 UTC https://padlet.com/teoshuangleslie/n3n6xy76j7temol5/wish/547184073