Journals / Manisa Celal Bayar Üniversitesi Sosyal Bilimler Dergisi / 2015 / Cilt: 13 - Sayı: 2

-

Finansal Hizmet Sektöründe Siber Güvenlik Riskleri ve Çözüm Yolları: Ödeme Sistemleri ve Tedarik Zinciri Bütünlüğü

Pages
97–120
Publication Date
2015-07-03
DOI
—
🏛️Bibliographic metadata and full text access for this article are provided via DergiPark.
DergiPark Record ↗
✨

AI Summary & Key Takeaways

AI Insight
⚡ TL;DR(Too Long; Didn't Read)

The study addresses the aforementioned potential cyber security risks in the context of cyber security norms and cyber security measures are discussed from an administrative perspective

📌 3 Key Takeaways

🎯
Objective & Hypothesis:Turkey continues to be statistically in the forefront of the world rankings in terms of the exposure to cyber security threats.
📊
Key Findings & Data:In Turkey, many academic studies related to cyber security or legal issues in regard to cybercrime have been conducted to date.
💡
Conclusion & Impact:The study addresses the aforementioned potential cyber security risks in the context of cyber security norms and cyber security measures are discussed from an administrative perspective
🔬Design:Research Article
📍Scope:Comprehensive Sample
⚙️Variables:Siber Güvenlik · Bankacılık · Finans

Abstract

Turkey continues to be statistically in the forefront of the world rankings in terms of the exposure to cyber security threats. In Turkey, many academic studies related to cyber security or legal issues in regard to cybercrime have been conducted to date. Further, the risk factors that lead to cyber security problems and the causes of these factors should be examined more rigorously. Internet banking, debit and credit card uses and e-commerce are the key components of the online payment system that suffer intrusions. Software supply system is also one of the most important technical infrastructure elements of the financial system security. Increasing cyber risks diminish consumer confidence regarding online payment systems, and such risks could cause extraordinary expenditures within financial system. Therefore, a nationwide analysis and interpretation of the cyber security risks is vital for national economy and cyber critical infrastructure security. In this study, online payment systems in Turkey and the appertaining cyber security systems that are supported by software supply chains are examined in terms of the associated risks. The study addresses the aforementioned potential cyber security risks in the context of cyber security norms and cyber security measures are discussed from an administrative perspective

Özet

Türkiye kötücül yazılım kaynaklı siber güvenlik tehditlerine maruz kalma açısından dünya sıralamalarında en üst sıralarda olmaya devam etmektedir. Türkiye’de birçok akademik çalışmada siber güvenlikle ilgili siber suçların işleniş tarzı ya da hukuki boyutu incelenmiştir. Bununla beraber, bu hususların ötesinde siber güvenlik problemlerine neden olan risk faktörleri ve bu faktörlerin nedenleri yeterince incelenmelidir. İnternet bankacılığı, banka ve kredi kartları kullanımı ve e-ticaret finansal siber güvenlik sisteminin korunması gereken en önemli bileşenleridir. Yazılım tedarik sistemi ise finansal sistem güvenliğini oluşturan en önemli teknik altyapı unsurlarındandır. Artan siber riskler tüketici güveninin azalmasına, vatandaşların finans sistemini internet aracılığıyla daha az kullanmasına ve finans sistemlerinin beklenmeyen giderlerinin artmasına neden olacaktır. Bu nedenle siber güvenlik risklerinin ulusal bazda incelenmesi ve yorumlanması ülke ekonomisi ve siber kritik altyapı güvenliği açısından hayati öneme sahiptir. Bu çalışmada Türkiye’de çevrimiçi ödeme sistemleri ve bu sistemin siber güvenliğini destekleyen yazılım tedarik zincirlerinin barındırdıkları riskler incelenmiştir. Çalışmada, bahse konu potansiyel riskler siber güvenlik normları kapsamında tanımlanmakta ve siber güvenlik önlemleri yönetimsel açıdan tartışılmaktadır.

🔖

Cite This Article

YEŞİLYURT, D. H. (2015). -. Manisa Celal Bayar Üniversitesi Sosyal Bilimler Dergisi, Cilt: 13 - Sayı: 2, 97–120. https://ajindex.com/articles/116652

📄 Full Text PDF Viewer

📄

PDF görüntüleyici hazırlanıyor...

References (7)

  1. ASSAF, Dan (2008), "Models of Critical İnformation İnfrastructure Protection", International Journal of Critical Infrastructure http://www.researchgate.net/profile/Dan_Assaf/ Protection, 19.05.2014. Sayı: 1, ss. erişim tarihi: ALBERTS, Christopher, J., & DOROFEE, Audrey, J, (2009, Nisan), A Framework for Categorizing Key Drivers of Risk (No. CMU/SEI-2009-TR-007 Pittsburgh, PA: Software Engineering Institute, http://repository.cmu.edu/cgi/viewcontent.cgi?article=1045&conte xt=sei, erişim tarihi: 08.05.2014
  2. Mellon University, ANDRIJCIC, Eva ve HOROWITZ, Barry (2006), “A Macro‐ Economic Framework for Evaluation of Cyber Security Risks Related to Protection of Intellectual Property”, Risk Analysis, Sayı: 26(4), ss. 907-923. erişim tarihi: 20.05.2014 BANKALARARASI KART MERKEZİ (BKM), 2014. Dönemsel Bilgiler, http://www.bkm.com.tr/donemsel-bilgiler.aspx 08.05.2014 İstanbul, tarihi: erişim BELLA, Giampaolo, MASSACCI, Fabio ve PAULSON, Lawrence, C. (2005), “An Overview of the Verification of SET”, International Journal doi:10.1007/s10207-004-0047-7. Security, of Information Sayı:4(1/2), 17-28. DZEMYDIENĖ, D., NAUJIKIENĖ, R., KALINAUSKAS, M., & JASIUNAS, E. (2010). “Evaluation of Securıty Disturbance Risks in Electronic Economics, Sayı:2(8), ss.21-29. Payment Financial Systems”, Intellectual ELLISON, Robert. J., ALBERTS, Christopher, CREEL, Rita., DOROFEE, Audrey ve WOODY. Carrol (2010), Software supply chain risk management: From products to systems of systems, Software Engineering http://www.sei.cmu.edu/reports/10tn026.pdf, 02.05.2014.
  3. Institute, Pittsburgh. erişim tarihi: FILSINGER, Jarrellann, FAST, Barbara, WOLF, Danial.G., PAYNE, James, F.X. (2012), Supply chain risk management awareness,Armed Forces Communication and Electronics Association, Cyber Committee. http://www.afcea.org/committees/cyber/documents/Supplychain.p df, erişim tarihi: 08.05.2014
  4. GOERTZEL, Karen Mercedes (2010) "Supply Chain Risk Management and the Software Supply Chain", OWASP AppSec DC, erişim https://www.owasp.org/images/7/77/BoozAllen- AppSecDC2010-sw_scrm.pdf, erişim tarihi:15.05.2015.
  5. GRAUMAN, Brigid (2012), Cyber-security: The Vexed Question of http://www.isssource.com/wp- content/uploads/2012/02/020212rp-sda-cyber-security.pdf, erişim tarihi: 23.05.2014
  6. Security and Defence Agenda, HILTGEN, Alain, KRAMP, Thorsten ve WEIGOLD, Thomas (2006), “Secure Internet Banking Authentication”, Security & Privacy, IEEE, Sayı:4(2), ss.21-29, erişim tarihi: 08.05.2014
  7. HUTCHINSON, Damien, & WARREN