Received 18.07.2023, Revised 09.10.2023, Accepted 29.11.2023
Protection of financial resources is one of the priority tasks of the state, which determines its independence and subjectivity. This is especially relevant in the case of Ukraine, which is conducting full-scale military operations, therefore the study of the cyber security problem of the financial sphere of Ukraine and the formulation of recommendations for their solution became the purpose of this study. Methods of statistical analysis, systematization and synthesis were used to analyse the dynamics in the field of protection of critical information, whereas the intelligence method, based on open sources, was used to reveal the main trends, methods, and tools of modern cyber fraud. As a result, a list of problems and threats to the financial sector of Ukraine was formed. An assessment of existing trends in the effectiveness of countering such challenges is given, and several recommendations have been developed to prevent the leakage of personal data and the vulnerability of financial structures. Such recommendations included the introduction of clear algorithms for personnel behaviour, separation of subsystems with different levels of access and their restriction of access to external networks, as well as personal digital security rules – use of two-factor authentication, prohibition of transmission of passwords and temporary codes, etc. In the context of the dynamics of the growth of the number of Internet users over the last five years in the world, the international principles of ensuring information security and the legislation of Ukraine, which regulates actions to protect against cyber-attacks, were analysed. The practical significance of the research lies in finding ways to solve problems in the field of information security of the financial sector and forming recommendations that may be useful to the management of financial institutions
information security; financial sector; digitalization; threats; cybercrimes; information protection
[1] Bozhenko, V., Kushneryov, O., & Kildei, A. (2021). Determinants of spreading cyberthreats in financial sector. Economic Forum, 1(4), 116-121. doi: 10.36910/6775-2308-8559-2021-4-16.
[2] Btoush, Е., Zhou, Х., Gururaian, R., Chan, K., & Tao, Х. (2021). A survey on credit card fraud detection techniques in banking industry for cyber security. In 8th international conference on behavioral and social computing (BESC). Doha: IEEE. doi: 10.1109/BESC53957.2021.9635559.
[3] Calliess, C., & Baumgarten, A. (2020). Cybersecurity in the EU the example of the financial sector: A legal perspective. German Law Journal, 21(6), 1149-1179. doi: 10.1017/glj.2020.67.
[4] Constitution of Ukraine. (1996, June). Retrieved from https://www.president.gov.ua/documents/constitution.
[5] Decree of the President of Ukraine No. 447 “On Cyber Security Strategy of Ukraine”. (2021, May). Retrieved from https://www.president.gov.ua/documents/4472021-40013.
[6] Demertzis, М., & Wolff, G. (2020). Hybrid and cyber security threats and the EU’s financial system. Journal of Financial Regulation, 6(2), 306-316. doi: 10.1093/jfr/fjaa006.
[7] Digital 2023: Global overview report. (2023). Retrieved from https://datareportal.com/reports/digital-2023-global-overview-report.
[8] Feyen, Е., Frost, J., Gambacorta, L., Natarajan, Н., & Saal, М. (2021). Fintech and the digital transformation of financial services: Implications for market structure and public policy. BIS Papers, article number 117.
[9] Fischer-Hübner, S., Alcaraz, С., Ferreira, А., Fernandez-Gago, С., Lopez, J., Markatos, Е., Islami, L., & Akil, М. (2021). Stakeholder perspectives and requirements on cybersecurity in Europe. Journal of Information Security and Applications, 61, article number 102916. doi: 10.1016/j.jisa.2021.102916.
[10] Geebren, А., Jabbar, А., & Luo, М. (2021). Examining the role of consumer satisfaction within mobile eco-systems: Evidence from mobile banking services. Computers in Human Behavior, 114, article number 106584. doi: 10.1016/j.chb.2020.106584.
[11] Hettiarachchige, H.H., & Jahankhani, H. (2021). Holistic authentication framework for virtual agents; UK banking industry. In R. Montasari, H. Jahankhani, & H. Al-Khateeb (Eds.), Challenges in the IoT and smart environments (pp. 245-286). Cham: Springer. doi: 10.1007/978-3-030-87166-6_10.
[12] Khudolii, Y., & Svystun, L. (2021). Modern FinTech trends and their impact on the safety of banking institutions. Economics and Region, 3(82), 115-123. doi: 10.26906/EiR.2021.3(82).2375.
[13] Kravtsova, M.O. (2018). Modern status and directions of counteraction of cybercrime in Ukraine. Bulletin of the Criminological Association of Ukraine, 2(19), 155-166.
[14] Kurylo, V., Karaman, O., Bader, S., Pochinkova, M., & Stepanenko, V. (2023). Critical thinking as an information security factor in the modern world. Social and Legal Studios, 6(3), 67-74. doi: 10.32518/sals3.2023.67.
[15] Lehto, M. (2022). Cyber warfare: The game changer in the battlespace. Cyberwatch Magazine, 2022(2), 21-26.
[16] Mishra, A., Alzoubi, Y.I., Gill, A.Q., & Anwar, M.J. (2022). Cybersecurity enterprises policies: A comparative study. Sensors, 22(2), article number 538. doi: 10.3390/s22020538.
[17] Number of cyber incidents in the financial industry worldwide from 2013 to 2022. (2023). Retrieved from https://www.statista.com/statistics/1310985/number-of-cyber-incidents-in-financial-industry-worldwide/.
[18] Onyshchenko, S., & Hlushko, A. (2020). Conceptual foundations of information security of national economy in the conditions of digitalization. Social Economics, 59, 14-24. doi: 10.26565/2524-2547-2020-59-02.
[19] Onyshchenko, S., Hlushko, A., & Yanko, A. (2020). Role and importance of information security in a pandemic environment. Economics and Region, 2(77), 103-108. doi: 10.26906/EiR.2020.2(77).1954.
[20] Onyshchenko, V., Yehorycheva, S., Maslii, О., & Yurkiv, N. (2020). Impact of innovation and digital technologies on the financial security of the state. In V. Onyshchenko, G. Mammadova, S. Sivitska, & A. Gasimov (Eds.), Proceedings of the 3rd international conference on building innovations (pp. 749-759). Cham: Springer. doi: 10.1007/978-3-030-85043-2_69.
[21] Russian cyber operations. (2023). Retrieved from https://cip.gov.ua/services/cm/api/attachment/download?id=60201.
[22] Sharma, A., Singh, S.K., Kumar, S., Chhabra, A., & Gupta, S. (2023). Security of android banking mobile apps: Challenges and opportunities. In N. Nedjah, G. Martínez Pérez, & B.B. Gupta (Eds.), International conference on cyber security, privacy and networking (pp. 406-416). Cham: Springer. doi: 10.1007/978-3-031-22018-0_39.
[23] Statistical report on the results of the vulnerability detection and cyber incidents/cyber attacks response system operation for 2022. (2023). Retrieved from https://scpc.gov.ua/en/articles/233.
[24] Teichmann, F.M.J., Wittmann, C., & Sergi, B.S. (2023). Operational resilience in light of the war in Ukraine: The disruptive effect of implementing economic sanctions on financial service providers. Journal of Financial Crime. doi: 10.1108/JFC-01-2023-0005.
[25] The cyber kill chain. (2023). Retrieved from https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html.
[26] Uddin, M.H., Ali, M.H., & Hassan, M.K. (2020). Cybersecurity hazards and financial system vulnerability: A synthesis of literature. Risk Management, 22, 239-309. doi: 10.1057/s41283-020-00063-2.
[27] Varga, S., Brynielsson, J., & Franke, U. (2021). Cyber-threat perception and risk management in the Swedish financial sector. Computers & Security, 105, article number 102239. doi: 10.1016/j.cose.2021.102239.
[28] Villar, A.S., & Khan, N. (2021). Robotic process automation in banking industry: A case study on Deutsche Bank. Journal of Banking and Financial Technology, 5, 71-86. doi: 10.1007/s42786-021-00030-9.
[29] Yesimov, S., & Borovikova, V. (2023). Methodological foundations of information security research. Social and Legal Studios, 6(1), 49-55. doi: 10.32518/sals1.2023.49.