본문 바로가기
  • Home

The Rational Improvement Plans of Inspection Standards on Vulnerability Analysis and Evaluation in Electronic Financial Infrastructure

  • Journal of Knowledge Information Technology and Systems
  • Abbr : JKITS
  • 2017, 12(6), pp.913-923
  • DOI : 10.34163/jkits.2017.12.6.013
  • Publisher : Korea Knowledge Information Technology Society
  • Research Area : Interdisciplinary Studies > Interdisciplinary Research
  • Published : December 31, 2017

Gwang Bae Kim 1 Kwon, Hun-Yeong 1

1고려대학교

Accredited

ABSTRACT

To secure the safety and reliability of the electronic financial transactions, the financial company perform vulnerability analysis and evaluation on the electronic financial infrastructure. However, the financial sector vulnerability analysis and evaluation criteria that are used in the analysis and evaluation of electronic financial infrastructure vulnerabilities by financial companies have not been updated since its distribution in 2012, Although vulnerability analysis and evaluation agencies such as the financial information sharing and analysis center and the information security professional services company are updating their own vulnerability analysis and evaluation standards, since the standards are not standardized, financial companies are confused when performing vulnerability analysis and evaluation. n this paper, we analyze the problems of the existing analysis and evaluation criteria of the electronic financial infrastructure and propose a measure to establish a reasonable inspection standard in accordance with the characteristics of the financial institution's electronic financial infrastructure and suggest a supplementary point using the information security management system. In addition, We introduced example case of establishing the criteria of analyzing and evaluating the vulnerability according to the autonomous security system of the financial company

Citation status

* References for papers published after 2023 are currently being built.