Data security challenges and countermeasures in financial technology

Jianming ZHU; Hongrui YANG

doi:10.11959/j.issn.2096-109x.2019044

您当前的位置：

首页 >

文章列表页 >

Data security challenges and countermeasures in financial technology

Papers | 更新时间：2024-06-03

- Data security challenges and countermeasures in financial technology
- Chinese Journal of Network and Information Security Vol. 5, Issue 4, Pages: 71-79(2019)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019044
  CLC： TP393.08
- Online First：2019-08，
  
  Published：15 August 2019
- 稿件说明：
移动端阅览
Jianming ZHU, Hongrui YANG. Data security challenges and countermeasures in financial technology[J]. Chinese Journal of Network and Information Security, 2019, 5(4): 71-79.
DOI：

Jianming ZHU, Hongrui YANG. Data security challenges and countermeasures in financial technology[J]. Chinese Journal of Network and Information Security, 2019, 5(4): 71-79. DOI： 10.11959/j.issn.2096-109x.2019044.

摘要

金融科技为金融业带来机遇的同时带来了新的挑战，金融业务数字化、网络化、智能化引发的数据爆发式增长，对数据安全治理提出了更高的要求。因此，在对金融科技发展现状及其金融数据安全分析的基础上，针对金融数据特点，提出了金融数据安全“果壳”模型：其内部是确保数据保密性、完整性、可用性的安全目标；外部是可能存在的数据被泄露、篡改、破坏等各种威胁；中间是各种应对策略，包括访问策略、防控策略、检测或感知策略等。以此模型为基础，对金融科技中的数据安全治理提出了相关建议和对策。

Abstract

While financial technology brings opportunities to the financial industry

it also brings new challenges.With the rapid development of financial technology

the big data explosion caused by the digitalization

networking and intelligence of financial services has put forward new and greater requirements for data security governance.Based on the analysis of the status quo of financial technology development and financial data security

a financial data security “shell” model for the characteristics of financial data was proposed:the internal is the security goals of ensuring data confidentiality

integrity

and availability; the external is a variety of threats including data leaking

tampering and destroying etc; the middle is various coping strategies

including access strategies

prevention and control strategies

detection strategies

perceived strategies and etc.According to this model

relevant suggestions and countermeasures for data security governance in financial technology are proposed.

关键词

Keywords

references

尹志超 , 余颖丰 . 重视金融科技在金融发展中的作用 [N ] ., 光明日报,理论 ,2018-11-20.

YIN Z C , Yu Y F . Pay Attention to the role of financial technology in financial development [N ] . Guangming Daily,Theory ,2018-11-20.

普华永道 . 2018年中国金融科技调查报告 [R ] . 2018 .

PwC . 2018 China financial technology survey report [R ] . 2018 .

Verizon . 2019 data breach investigations report(12th edition) [R ] . 2019 .

吴信东 , 董丙冰 , 堵新政 , 等 . 数据治理技术 [J ] . 软件学报 , 2019 , 30 ( 9 ): 1 - 22 .

WU X D , DONG B B , DU X Z , et al . Data governance technology [J ] . Journal of Software , 2019 , 30 ( 9 ): 1 - 22 .

张明英 , 潘蓉 . 《数据治理白皮书》国际标准研究报告要点解读 [J ] . 信息技术与标准化 , 2015 ( 6 ): 54 - 57 .

ZHANG M Y , PAN R . Interpretation of the key points of the international standards research report on data governance white paper [J ] . Information Technology ＆ Standardization , 2015 ( 6 ): 54 - 57 .

李文红 , 蒋则沈 . 金融科技（FinTech）发展与监管:一个监管者的视角 [J ] . 金融监管研究 , 2017 ( 3 ): 1 - 13 .

LI W H , JIANG Z S . FinTech development and supervision:a regulator's perspective [J ] . Financial Supervision Research , 2017 ( 3 ): 1 - 13 .

中国信息通信研究院 . 人工智能发展白皮书-产业应用篇（2018） [R ] . 2018 .

China Academy of Information and Communications Technology . Artificial intelligence development white paper—industrial application(2018) [R ] . 2018 .

赵维平 . 大数据为金融创新插上翅膀 [J ] . 中国金融 , 2019 ( 4 ): 21 - 22 .

ZHAO W P . Big data inserts wings for financial innovation [J ] . China Finance , 2019 ( 4 ): 21 - 22

肖翔 , 陈则栋 , 战天舒 , 等 . 我国商业银行金融科技发展现状、问题与建议 [J ] . 当代金融家 , 2018 ( 8 ): 76 - 79 .

XIAO X , CHEN Z D , ZHAN T S , et al . Status quo,problems and suggestions on the development of financial technology in China's commercial banks [J ] . Contemporary Financiers , 2018 ( 8 ): 76 - 79 .

王冠 , 张敏 . 区块链商业金融的应用层次、问题与对策建议 [J ] . 商业经济研究 , 2018 ( 7 ): 162 - 165 .

WANG G , ZHANG M . Application levels,problems and countermeasures of blockchain commercial finance [J ] . Business Economics Research , 2018 ( 7 ): 162 - 165 .

中国信息通信研究院 . 金融行业云计算技术调查报告(2018) [R ] . 2018 .

China Academy of Information and Communications Technology . Financial industry cloud computing technology survey report(2018) [R ] . 2018 .

周志华 . 机器学习 [M ] . 北京 : 清华大学出版社 , 2016 .

ZHOU Z H . Machine learning [M ] . Beijing : Tsinghua University PressPress , 2016 .

李连朋 , 罗宏 . 国内外金融业信息安全综述 [J ] . 网络与信息安全学报 , 2017 , 3 ( 2 ): 9 - 19 .

LI L P , LUO H . Review of domestic and international financial security [J ] . Chinese Journal of Network and Information Security , 2017 , 3 ( 2 ): 9 - 19 .

PWC . Global economic crime survey [R ] . 2016 .

朱建明 , 高博 . 社交金融的信息安全风险分析与防范 [J ] . 网络与信息安全学报 , 2016 , 2 ( 3 ): 46 - 51 .

ZHU J M , GAO B . Social financial information security risk analysis and prevention [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 3 ): 46 - 51 .

石光 . 金融科技“双刃剑” [J ] . 中国金融 , 2019 ( 6 ): 74 - 76 .

SHI G . Financial technology double-edged sword [J ] . China Finance , 2019 ( 6 ): 74 - 76 .

数据安全治理白皮书2.0 [R ] . 北京:北京安华金和科技有限公司 , 2019 .

Data security governance white paper 2.0 [R ] . Beijing:Beijing AnhuaJinhe Technology Co.,Ltd. , 2019 .

刘宇 . 我国金融科技监管框架完善路径浅析 [J ] . 中国金融电脑 , 2019 ( 7 ): 35 - 37 .

LIU Y . Analysis on the perfection path of China's financial science and technology supervision framework [J ] . China Financial Computer , 2019 ( 7 ): 35 - 37 .

KOPP E , KAFFENBERGER L , WILSON C . Cyber risk,market failures,and financial stability [M ] . International Monetary Fund , 2017 .

丁丽媛 . 基于数据生命周期的金融数据安全管理研究 [J ] . 信息安全研究 , 2018 ( 6 ): 548 - 554 .

DING L Y . Research on financial data security management based on data life cycle [J ] . Information Security Research , 2018 ( 6 ): 548 - 554 .

GB/T 36073-2018,数据管理能力成熟度评估模型 [S ] . 北京:中国国家标准化管理委员会 , 2018 .

GB/T 36073-2018,Data management capability maturity assessment model [S ] . Beijing:China National Standardization Administration Committee , 2018 .

朱红儒 . 信息安全技术数据安全能力成熟度模型 [R ] . 北京:全国信息安全标准化技术委员会 , 2018 .

ZHU H R . Information security technology data security capability maturity model [R ] . Beijing:National Information Security Standardization Technical Committee , 2018 .

郑斌 . 企业数据安全能力框架——数据安全能力成熟度模型的构建及应用 [J ] . 信息安全与通信保密 , 2017 ( 11 ): 70 - 78 .

ZHENG B . Organizational data security capability framework——development and implementation of data security competency maturity model [J ] . Information Security and Communication Confidentiality , 2017 ( 11 ): 70 - 78 .

Views

635

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research progress on autonomous driving security technology for vehicle-road-cloud collaboration

Application of generative adversarial networks for financial data

Blockchain-based cross-data center anonymous and verifiable identity authentication scheme

Scenario-aware access control model

Technology and practice of intelligent governance for financial data security

Related Author

GUO Minyi

CHEN Xiuzhen

LI Jianhua

SUN Kangkang

YE Guangnan

LIU Sen

CUI Yihao

SHAO Wei

Related Institution

Shanghai Municipal Key Lab of Integrated Management Technology for Information Security

School of Computer Science, Shanghai Jiao Tong University

Institute of FinTech, Fudan University

Shandong Provincial Key Laboratory of Computer Networks, Shandong Fundamental Research Center for Computer Science

Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan), Qilu University of Technology (Shandong Academy of Sciences)

⁰