Applying Combined One-Time Passwords to Prevent Phishing Attacks in Electronic Banking

With the development of information and communication technology, we always see the development of attacks and subversive activities on this new platform. Phishing attacks are a group of attacks that endanger the security of users and their vital information, including their passwords, and so far many solutions, including one-time passwords, have been proposed to prevent existing risks. With these methods, users log in to websites using fake passwords to avoid phishing assaults. Despite the activities that have been done in order to use one-time passwords to prevent phishing attacks, this issue still stands out as a major challenge, and it is necessary to do more research in this regard. In this research, attention has been paid to the combined one-time passwords, and a solution based on behavioral patterns has been proposed, which has made significant improvements while maintaining its simplicity and user friendliness. The efficiency of the proposed method has been calculated analytically by using scenario definition, modeling, and simulation and based on the measure of the prevention rate as well as the complexity factor of the proposed method, which shows the probability of not being guessed by the attackers. Finally, by performing a descriptive comparison, the superiority of the proposed method over some existing methods has been shown. Based on the obtained results, the prevention rate of phishing attacks in the proposed method is 100 percent compared to other methods, which shows the effectiveness of the proposed method in preventing phishing attacks The efficiency of the proposed method was evaluated using simulation scenarios, analytical complexity calculations, and descriptive comparisons against existing methods.