Abstract:In the era of digital financial innovation, the importance of financial security is being emphasized day by day as the financial sector expands its use of technologies such as the Internet of Things(IoT), Cloud, BigData, and Artificial Intelligence(AI). Financial security refers to Fintech security and involves establishing and operating an integrated security control system against cyber threats that take advantage of security vulnerabilities resulting from the introduction of innovative technologies, responding to intrusion incidents, and analyzing and assessing vulnerabilities. In particular, security risks are emerging as cloud services are utilized throughout the financial industry, and financial security control and abnormal financial transaction detection are being advanced by applying AI technology. Additionally, in the financial sector, data security and information protection are emerging as very important issues in the era of the MyData platform. As the MyData service expands, where a large number of personal information is concentrated in one place, the threat of personal information infringement due to indiscriminate information collection and service hacking is also increasing. Accordingly, it is necessary to strengthen personal information protection within the MyData service and increase awareness of cyber security and financial security. Against this background, this study first examines changes in the security environment of the financial sector (internal control and abnormal financial transaction detection) and the components of the integrated security control system. Next, we would like to derive security threats to the financial sector such as phishing and smishing using social engineering techniques, authentication information theft, Ransomware, Emotet, Soggolish, BEC, and TOAD. Lastly, in relation to cyber security policies in the financial sector, we would like to discuss countermeasures against Ransomware in the financial sector, plans to build a next-generation financial security control system, MyData information protection and information security, and the applicability of the Zero Trust model in the financial sector.

Analysis of Loss Expectancy on Personal Information leakage using Quantitative Invest Decision Model

Estimation of Financial Loss Ratio for E-insurance: a Quantitative Model

Information Security Problem Research Based on Game Theory

A Study on the Stock Price Fluctuation of Information Security Companies in Personal Information Leakage

Understanding the Cost associated with Data Security Breaches.

A Model of Authority Management for the Protection of Personal Information in OLAP

Study on sensitive information leakage vulnerability modeling

A Study on Personal Information Protection Management Assessment Method by DEA

Privacy and Personal Data Collection with Information Externalities

Analyzing the risk and financial impact of phishing attacks using a knowledge based approach

A study on the development of SRI(Security Risk Indicator)-based monitoring system to prevent the leakage of personally identifiable information

An Extended Privacy Calculus Model for E-Commerce Transactions

Value versus damage of information release: A data privacy perspective

Investigating Perceptions about Risk of Data Breaches in Financial Institutions: A Routine Activity-Approach

Research Note---A Value-at-Risk Approach to Information Security Investment

A prediction model for the purchase probability of anonymous customers to support real time web marketing: a case study

Personal Identity Proofing for E-Commerce: A Case Study of Online Service Users in the Republic of Korea

Research on Privacy Security Risk Assessment Method of Mobile Commerce Based on Information Entropy and Markov

A Study on Digital Financial Security Threats and Cybersecurity Policies

Information and Knowledge Leakage in Supply Chain