信息安全研究 ›› 2020, Vol. 6 ›› Issue (3): 235-243.

• 学术论文 • 上一篇    下一篇

基于金融行业支付场景的安全态势感知模型研究

廖渊,李北川   

  1. 中国邮政储蓄银行股份有限公司信息科技管理部
  • 收稿日期:2020-03-02 出版日期:2020-03-10 发布日期:2020-03-02
  • 通讯作者: 廖渊
  • 作者简介:廖渊 博士,高级工程师,主要研究方向为金融科技风险与网络安全. yuanliao@psbcoa.com.cn 李北川 硕士、工程师,主要研究方向为金融科技风险与网络安全. libeichuan@psbcoa.com.cn

Research on Security Situation Awareness Model Based on Payment Scenario of Financial Industry

  • Received:2020-03-02 Online:2020-03-10 Published:2020-03-02

摘要: 支付是金融行业应用最多的场景,在利益的驱使下,针对支付业务场景的网络攻击越来越多.如何准确有效地感知支付场景的安全风险是当前研究的问题之一.重点剖析了当前态势感知系统和支付业务安全监控系统的现状,分析了这2类传统系统在支付业务场景风险感知的不足.介绍了支付场景态势感知平台的功能架构和技术框架和基于网络、主机及业务应用的多渠道监控安全事件的分析方法.以账户暴力破解和恶意开户2种典型支付业务场景为例,利用自回归积分滑动平均模型并结合高斯算法,设计了基于金融行业支付业务场景的态势感知模型,成功实现了支付场景化风险的安全态势的未来预测和周期性预测.

关键词: 支付场景化, 支付安全, 态势感知模型, 态势预测, 安全数据分析

Abstract: Payment is the most widely used scenario in the financial industry. Driven by the interests, there are more and more network attacks against payment business scenarios. How to accurately and effectively perceive the security risk of payment scenarios is one of the current research issues, This paper focuses on the current situation awareness system and payment business security monitoring system, and analyzes the shortcomings of these two traditional systems in payment business scenario risk perception. Introduces the functional architecture and technical framework of payment scenario situation awareness platform, and the analysis method of multichannel monitoring security events based on network, host and business application.Taking two typical payment business scenarios of violent account cracking and malicious account opening as examples, using autoregressive integrated moving average model and Gaussian algorithm, a situation awareness model based on financial industry payment business scenario is designed, which successfully realizes the future prediction and periodic prediction of security situation of payment scenario risk.

Key words: payment scenario, payment security, situation awareness model, situation prediction, security data analysis