Understanding Cybersecurity Management in FinTech

This book uncovers the idea of understanding cybersecurity management in FinTech. It commences with introducing fundamentals of FinTech and cybersecurity to readers. It emphasizes on the importance of cybersecurity for financial institutions by illustrating recent cyber breaches, attacks, and financial losses. The book delves into understanding cyber threats and adversaries who can exploit those threats. It advances with cybersecurity threat, vulnerability, and risk management in FinTech. The book helps readers understand cyber threat landscape comprising different threat categories that can exploit different types of vulnerabilties identified in FinTech. It puts forward prominent threat modelling strategies by focusing on attackers, assets, and software and addresses the challenges in managing cyber risks in FinTech. The authors discuss detailed cybersecurity policies and strategies that can be used to secure financial institutions and provide recommendations to secure financial institutions from cyber-attacks.

Gurdip Kaur is a Postdoctoral Fellow at the Canadian Institute for Cybersecurity, University of New Brunswick, Canada. She is CompTIA certified CyberSecurity Analyst (CySA+) and a gold medalist in Bachelor of Technology from Punjab Technical University, India. She completed her PhD in Computer Science and Engineering from the National Institute of Technology, India with specialization in malware analysis. She was awarded a silver medal for the project titled 'Implementation and deployment of High Interaction honeypot for research purpose' by the National Defense and Research Forum (NDRF), India in 2013. Her research areas focus on cybersecurity, malware analysis, reverse engineering, vulnerability management, incident reporting, and data science.

Ziba Habibi Lashkari is an Assistant Professor of finance in the Department of Organization Engineering, Business Administration, and Statistics, the Technical University of Madrid, Spain. She had been participating in the project of 'Análisis de Modelos en Dinámica de poblaciones Estructuradas en Valoración de Derivados Financieros' financed by the Spanish Ministry of Economy. She has more than 15 years of academic and industry experience in financial management. Her research focuses on asset pricing, risk Management, cybersecurity risk in digital financial and data science in fintech.

Arash Habibi Lashkari is a senior member of the IEEE, an Associate Professor at the Faculty of Computer Science, University of New Brunswick (UNB), and the Research Coordinator of the Canadian Institute for Cybersecurity (CIC). Dr. Lashkari has over 20 years of teaching experience, spanning several international universities, and has been the recipient of 15 awards at international computer security competitions - including three gold awards. In 2017, he was recognized as one of Canada's Top 150 researchers who will shape the future of Canada. In 2020, Dr. Lashkari was recognized with the University of New Brunswick's prestigious Teaching Innovation Award for his personally created teaching methodology, the Think-Que-Cussion Method. He is the author of ten published books and more than 90 academic papers on various cybersecurity-related topics. He is the founder of the Understanding Cybersecurity Series, which is an ongoing five-year research and development project, to culminate with a varied collection of online articles, published books, open-source packages, and datasets tailored for researchers and readers at all levels. The first article series of this project entitled 'Understanding Canadian Cybersecurity Laws' has been recently recognized with a Gold Medal at the 2020 Canadian Online Publishing Awards, remotely held in 2021. Building on over two decades of concurrent industrial and development experience in network, software, and computer security, Dr. Lashkari's current work involves developing vulnerability detection technology to protect network systems against cyberattacks. He simultaneously supervises multiple research and development teams working on several projects related to network traffic analysis, malware analysis, Honeynet and threat hunting.