본문 바로가기
  • Home

A Repeatedly Applicable Risk Prioritization Model for Increasingly Advanced AI Threats in the Financial Sector

  • Journal of The Korea Society of Computer and Information
  • Abbr : JKSCI
  • 2026, 31(9), pp.107~116
  • Publisher : The Korean Society Of Computer And Information
  • Research Area : Engineering > Computer Science
  • Received : July 16, 2026
  • Accepted : August 20, 2026
  • Published : September 30, 2026

Seungman Jin 1,  Deukjo Hong 1

1전북대학교

Accredited

ABSTRACT

Financial institutions' rapid adoption of generative AI improves operational efficiency, but it also exposes them to autonomous AI threats that independently probe and attack external touchpoints, creating a problem in which threats evolve faster than security infrastructure and governance can be built. This study defines this speed gap as an independent research problem termed the Security Control Gap, and proposes a repeatedly recalculable risk-scoring model—based on likelihood, impact, detectability, and governance gap—that organizations can apply directly to security investment and phased response strategies. Applying this model to a Model Context Protocol (MCP)-based generative AI development environment, a Best-Worst Method (BWM) analysis identified unauthorized direct access to an external LLM (T1) as the top-priority threat; under an equal-weight baseline, T1 remained among the top two priorities together with T4 (Kendall's τ = 0.8), indicating that the core conclusion is largely, though not fully, insensitive to the weighting scheme.

Journal Copyright Policy

No CCL information provided

Citation status

* References for papers published after 2025 are currently being built.