WebApp Sec: Internet based banking applications security

[Amit Sharma <amit.sharma () linuxwaves com>]

Hi List,

I have been auditing a local Internet Bank's website in my area for a while now. 
OWASP and this mailing list provides excellant resource for looking at web apps security from a technical perspective; 
SQL injections, cross-site issues and like wise.

However, am sure there are domain specific security issues including social engineering, audit trail ones, outsourcing 
control requirements etc, into core of these web applications and developing an insight would improve security 
tremendously. Typical applications that now have web front end include balance inquiry, funds transfer, bill payment, 
transaction information, loan application. 

Any directions will be welkome.

Gracias,
Amit