Research on Automated Inspection of Electronic Financial Infrastructure Vulnerabilities － Focusing on Security Equipment
Year: 2026
Type: article
Abstract: Financial institutions use automation tools to assess electronic financial infrastructure, but existing solutions focus on general-purpose systems and provide limited support for key security appliances such as FW, VPN, IPS, DDoS, and WAF. As a result, vulnerability checks rely heavily on manual consultant reviews, causing high resource consumption and inconsistent outcomes. This study analyzes vendor-specific configuration formats and proposes a multi-source collection method using backup files and management interfaces (CLI, WebUI). Collected configurations are standardized and automatically evaluated through a rule engine aligned with electronic financial infrastructure assessment criteria. Testing on production devices showed an average automation rate of 74.2%. IPS and DDoS systems achieved higher rates due to simpler policy structures, whereas FW and VPN demonstrated lower rates. The findings show that the proposed approach improves the efficiency and consistency of security appliance assessments in real operational environments.
Authors: Hyunsu Yoo, Kyoungsu Kim, Hanjin Lee
Language: English
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: diamond
OpenAlex ID: W7140037304
FWCI:
Cites:
Cited by:
Related to: