网络攻击的金融监管困境与消解路径——以防范系统性金融风险为视角  

Regulatory Dilemma and Dissipation Path of Financial Cyber Attack--The Perspective of Preventing Systemic Financial Risks

作　　者：连浩琼 Lian Haoqiong

机构地区：[1]厦门大学法学院

出　　处：《国际经济法学刊》2024年第1期129-142,共14页Journal of International Economic Law

基　　金：国家社科基金重大项目“社会主义核心价值观融入行业规章体系建设的法治路径研究”(项目编号:20VHJ007)的阶段性成果。

摘　　要：数字金融的发展促使金融业务与信息技术深度融合,滋生了更具传染性的金融网络威胁。技术应用致使网络受攻击面不断扩大,静态监管手段存在技术壁垒,而动态监管措施单一且不力,导致系统性金融风险敞口扩大。网络韧性理论及网络韧性测试应运而生,强调网络攻击的监测预警和多元主体的协调联动,契合了系统性金融风险防控和网络攻击应对的现实需求。基于此,可以通过出台试点规范引入金融网络韧性测试,以指定和自愿相结合的模式确定测试范围,注重各参与主体在测试中的协调联动,以消解网络攻击可能引发的系统性金融风险。The development of digital finance has led to the deep integration of financial business and information technology,which has given rise to more contagious financial cyber threats.The application of technology has led to the expansion of the attack surface of the network.The existence of technical barriers to static supervision means.The dynamic supervision measures are single and ineffective.All of the above increases the exposure of financial risks.The theory of cyber resilience and cyber resilience test were born.It emphasizes the use of network monitoring and early warning,as well as the coordination and linkage of multiple entities,to respond to network attacks,which meets the practical needs of systemic financial risk prevention and control.Therefore,in order to dissipate systemic financial risks that may be triggered,we could introduce a pilot specification to start financial network resilience testing,determine the scope of the test in a combination of compulsory and voluntary mode,and emphasize the coordination of the participating entities in the test.

关 键 词：数字金融 网络攻击 系统性风险 网络韧性 

分 类 号：F832[经济管理—金融学] TP393.08[自动化与计算机技术—计算机应用技术]