Search

• Adopting PRISMA methodology to investigate cybersecurity threats in FinTech. • Identifying the most effective defense strategies to negate the threats by examining 74 published papers. • Comparing the threats and defenses from different perspectives, including their impacts and technical details. • Proposing a novel and refined taxonomy of security threats and defense strategies in FinTech. • Recommending future research directions to address existing security gaps in current FinTech systems. The rapid evolution of the Smart-everything movement and Artificial Intelligence (AI) advancements have given rise to sophisticated cyber threats that traditional methods cannot counteract. Cyber threats are extremely critical in financial technology (FinTech) as a data-centric sector expected to provide 24/7 services. This paper introduces a novel and refined taxonomy of security threats in FinTech and conducts a comprehensive systematic review of defensive strategies. Through PRISMA methodology applied to 74 selected studies and topic modeling, we identified 11 central cyber threats, with 43 papers detailing them, and pinpointed 9 corresponding defense strategies, as covered in 31 papers. This in-depth analysis offers invaluable insights for stakeholders ranging from banks and enterprises to global governmental bodies, highlighting both the current challenges in FinTech and effective countermeasures, as well as directions for future research. [ABSTRACT FROM AUTHOR]

With the rapid development of artificial intelligence, the Internet of Things and next generation mobile communication, the Internet of Medical Things (IoMT) as a typical application has attracted increasing attention as a typical application thereof owing to its convenience and practicality. To address certain privacy preservation issues concerning accessing patients records from past case databases as well as diagnosed patients' sensitive information on the Internet of Medical Things, an IoMT-secure privacy-preserving medical record search scheme (PMRSS) based on ELGamal blind signatures is proposed. In this paper, we first show that certain security flaws exists in the PMRSS. To address these flaws, we propose an improved privacy protection medical record searching scheme (iPMRSS) in IoMT for intelligent diagnoses based on the elliptical curve discrete logarithm problem (ECDLP). Security analysis demonstrates that our iPMRSS provides correctness, identity privacy is ensured based on the hard problem assumption of Elliptical curve discrete logarithm problem. Data security is satisfied based on the security of the Blind ECDSA Signature. Performance evaluations demonstrate that our theoretical results are consistent with simulations, thereby a comparative analysis with related state of art techniques show that our proposed iPMRSS scheme in about 1.5 ms has shorter time cost under some security level. • A privacy-preserving medical record searching scheme proposed by Sun et al. is not secure by a linear algebra attack. • A secure improved PMRSS scheme is proposed. • Security of the improved scheme achieves privacy and data security. • Performance of the improved scheme is reasonable for real applications. [ABSTRACT FROM AUTHOR]