SecureBank: An Intelligent Banking Security System for Detecting Fraudulent Transactions, Phishing URLs, Malicious APK Files and DDoS Attacks

Online banking has made financial services convenient, but it has also exposed users and banks to fraudulent transactions, phishing attacks, malicious mobile applications and Distributed Denial of Service (DDoS) attacks. Existing banking systems usually rely on predefined rules and on separate security tools that do not work together. This paper presents the design of SecureBank, an intelligent banking security system that brings banking operations and automated threat detection into one application. The banking application is built with Django and MySQL and has separate Admin, Bank and User modules for account management, fund transactions and transaction history, with rule-based fraud detection on transaction amount, frequency and other predefined conditions. Spring Cloud microservices, reached through an API Gateway, provide phishing URL classification using a machine-learning model trained on a labelled dataset, static analysis of uploaded Android application package (APK) files, and a sandbox-based network monitoring service that identifies DDoS-like activity and blocks users when configured request thresholds are exceeded. Detection results and security events are logged, and SMTP email alerts notify users and administrators. A survey of twenty studies shows that existing work treats each threat separately. The paper presents the proposed architecture and data flow diagrams; the system is an academic prototype and does not process real monetary transactions.