Master class for students on the topic: “Cybersecurity in the banking sector. How to protect your data”

On the birthday of Sberbank for the 2nd year students of the Accounting and Finance Faculty and 1st year students of the Faculty of Agricultural Mechanization, a master class was held on the topic: “Cybersecurity in the banking sector. How to protect your data."

The master class was held by TECH SALES Senior Client Manager, Stavropol Branch No. 5230 of Sberbank of Russia PJSC Ilya Lamonov.

In the modern world, the storage of banking information, its value and significance have increased many times, which, in turn, could not but attract the growth of criminal interest in it. The need to ensure the security of data storage, regular change and verification of passwords and control the likelihood of information leakage have become an integral part of the work of each bank.

To commit the theft and hacking of the banking system, an attacker does not have to break into the bank. A network user can hack from his personal computer, so the problem of information security in banks is quite acute.

Based on analytics for 2018, it can be said that globally the focus has shifted from cryptographic viruses to data leaks. For banking infrastructure, there has been a shift towards banking trojans and phishing. Attackers join forces in the form of sharing a common technical infrastructure, computing power and virus programs (virus software, malware). Throughout the year, attacks of different trojans from the same physical infrastructure were recorded. Top 5 include Trickbot (38 attacks), Cobalt (35 attacks), RTM (30 attacks), Emotet (21 attacks) and Dimnie (17 attacks). In 2019, the presence of these threats continues.

There is such a term KYC - “know your customer”. Today, the bank can transform it into KYE, that is, know your enemy. For this, the bank uses its own developed Intelligence Platform - collects and analyzes data on various attacks and threats, develops monitoring and countermeasures, and forms its own threat landscape.

The Bank processes only that information and only for those purposes that are defined in the Policy. The antivirus built into the Application processes the received information, excluding data related to a specific person determined on the basis of such information. The Bank takes all organizational and technical measures dependent on the Bank to protect User Information from unauthorized third-party access, use, copying and distribution. The Bank may involve partners with whom the Bank has entered into relevant confidentiality agreements in the processing of User Information. The transfer by the Bank to partners of anonymized data on the use of the Application for the purpose of improving work is carried out on the basis of agreements. User information may be stored on the resources of the Bank and its partners during the term of the contractual relationship, as well as within 5 years after the termination of such contracts. User information may be provided to state bodies in accordance with the requirements of applicable law.

In the process of presenting the material, students actively participated in the discussion of the urgent problem of protecting data from cyber crooks, Ilya Lamonov answered all questions and the students thanked him for very useful knowledge. 

Возврат к списку