금융혁신을 위한 핀테크 서비스의 보안 리스크 대응방안 연구
A Study of Countermeasure against Security Risk of Fintech Services for Financial Innovation
1
조회
0
다운로드
6
인용
0
참고문헌
키워드
초록
Fintech, which means the convergence of finance and information technology, becomes a hot topic in the financial sector. Through innovative activities on financial services, ICT(Information and Communication Technology) is integrated into the overall financial industry, and a new form of financial services could be expected to improve the existing financial system. On the other hand, fintech services are relatively vulnerable to security issues. Due to the process simplication and the channel fusion, the leakage of personal and financial informations, authentication bypass, phishing, and pharming are getting more concerned. In this study we investigated the security risk of fintech services in the viewpoints of service provider, technology adoption, and security policy. The possible countermeasures to reduce those risks are suggested because security is an important criterion for selecting financial services. This study basically o!ers quantification of the potential security risks and step-by-step control measures about business processes in the fintech services. The suggested security model includes user authentication, terminal security, payment information protection, API(Application Programming Interface) security, and abnormal transaction monitoring. This study might contribute to an understanding of the security risks and some possible measures for mitigating those risks on the practical perspective.
Abstract
Fintech, which means the convergence of finance and information technology, becomes a hot topic in the financial sector. Through innovative activities on financial services, ICT(Information and Communication Technology) is integrated into the overall financial industry, and a new form of financial services could be expected to improve the existing financial system. On the other hand, fintech services are relatively vulnerable to security issues. Due to the process simplication and the channel fusion, the leakage of personal and financial informations, authentication bypass, phishing, and pharming are getting more concerned. In this study we investigated the security risk of fintech services in the viewpoints of service provider, technology adoption, and security policy. The possible countermeasures to reduce those risks are suggested because security is an important criterion for selecting financial services. This study basically o!ers quantification of the potential security risks and step-by-step control measures about business processes in the fintech services. The suggested security model includes user authentication, terminal security, payment information protection, API(Application Programming Interface) security, and abnormal transaction monitoring. This study might contribute to an understanding of the security risks and some possible measures for mitigating those risks on the practical perspective.
참고문헌 (27)
- 김남훈, "Fintech 트렌드와 금융업에 대한시사점", 2015 모바일 비즈니스 인사이트 세미나 (2015)
- 김남훈, "지급결제 및 금융혁신 동향과 금융기관의 대응", 2015년 한국은행 지급결제컨퍼런스 (2015)
- 김수형, "핀테크시대 : 새로운 인증 기술을 요구하다", 정보과학회지, 33(5), pp.17~22 (2015)
- 김인석, "핀테크 환경변화에 따른 금융보안및 금융권의 대응방안", 월간 금융, 732, pp.7~13 (2015)
- 김종현, "금융권 핀테크 전략과 정보보안 방안", 동아 인포섹 2015-정보보호 콘퍼런스 (2015)
- 김형중, "핀테크 : 그 새로운 지평", 정보처리학회지, 22(5) (2015)
- 핀테크에 대한 이해와 대응전략, "금융결제원", ~ (2015)
- 전자지급결제서비스 동향및 시사점, "금융보안연구원", ~ (2014)
- 이상금융거래 탐지시스템가이드 및 소개 자료, "금융보안연구원", ~ (2014)
- IT·금융융합 지원방안, "금융위원회", ~ (2015)
- 동아일보, "금액-신용도 따라 보안수준 차별화… 금융거래 효율성 높여", ~ (2015)
- 박정국, "핀테크 서비스의 보안 취약점과 대응방안", 정보처리학회지, 22(5), pp.36~45 (2015)
- 성기윤, "핀테크 결제의 편리성과 안전성 : 토큰화 관점", 정보과학회지, 33(5), pp.13~16 (2015)
- 이남희, "서비스 혁신에 관한 문헌 연구: 성공요인, 프로세스 및 성과를 중심으로", 지식경영연구, 13(1), pp.41~52 (2012), 한국지식경영학회
- 조규민, "핀테크와 정보보호", 스마트금융&핀테크 비즈니스 콘퍼런스 (2015)
- 최대선, "핀테크와 보안", SCON(Sopt Conference 10th) IT 콘퍼런스 (2015)
- 한국은행, "2014년 지급수단 이용행태 조사결과 및 시사점", 지급결제조사자료(2015-1), ~ (2015)
- 한국은행, "국내외 비금융기업의 지급서비스 제공현황 및 정책과제", 지급결제조사자료(2014-6), ~ (2014)
- 한국인터넷진흥원, "산업간 융합 관점에서본 핀테크의 시사점" (2014), INTERNET & SECURITYFOCUS
- 허용석, "조직 구성원들이 인식하는 자사의 외부 지식 네트워크 구축의 선행요인들이 제품 및 서비스 혁신에 미치는 영향에 관한 실증분석 : 개방형 혁신의 관점을 기반으로", 지식경영연구, 14(3), pp.87~100 (2013), 한국지식경영학회
- Accenture, "The Future of Fintech and Banking: Digitally disrupted or re imagined?" (2015)
- Data Security Considerations for FinTech Companies, "Brown, I. W.", Bloomberg BNA Banking, ~, pp.100 BBR 766 (2013)
- Deutsche Bank, "Fintech–The digital(r)evolution in the)nancial sector", ~ (2014)
- "Speci)cation Overview" (2014)[URL]
- Ope Data Institute and Fingleton Associates, "Data Sharing and Open Data for Banks", ~ (2014)
- UK Trade & Investment, "Landscaping UK Fintech" (2014), Ernst & Young
- Venture Scanner, "Fintech Landscape Update: 1,000 Companies!", ~ (2015)