Book Image

Hands-On Cybersecurity for Finance

By : Dr. Erdal Ozkaya, Milad Aslaner
Book Image

Hands-On Cybersecurity for Finance

By: Dr. Erdal Ozkaya, Milad Aslaner

Overview of this book

Organizations have always been a target of cybercrime. Hands-On Cybersecurity for Finance teaches you how to successfully defend your system against common cyber threats, making sure your financial services are a step ahead in terms of security. The book begins by providing an overall description of cybersecurity, guiding you through some of the most important services and technologies currently at risk from cyber threats. Once you have familiarized yourself with the topic, you will explore specific technologies and threats based on case studies and real-life scenarios. As you progress through the chapters, you will discover vulnerabilities and bugs (including the human risk factor), gaining an expert-level view of the most recent threats. You'll then explore information on how you can achieve data and infrastructure protection. In the concluding chapters, you will cover recent and significant updates to procedures and configurations, accompanied by important details related to cybersecurity research and development in IT-based financial services. By the end of the book, you will have gained a basic understanding of the future of information security and will be able to protect financial services and their related infrastructures.
Table of Contents (20 chapters)

Securing the Perimeter and Protecting the Assets

Securing the perimeter in order to protect assets can be a very broad topic. In this chapter, the focus will be on IT perimeter security. There are a few different approaches to IT perimeter security but, at its core, the goal of IT perimeter security is having security controls in place against known and unknown threats while taking risk-based decisions.

"One of the main cyber risks is to think they don't exist. The other is to try to treat all potential risks."
– Stephane Nappo

A successful IT perimeter security plan will prove whether your security architecture, technologies in use, and established processes are able to prevent cyber attacks and, when they still occur, how fast you can detect and respond to them. Historically, many organizations rely on a single trust network model. In that model, organizations...