Financial Technology (FinTech) has attracted a wide range of attention and is rapidly proliferating. As a result of its consistent growth new terms have been introduced in this domain. The term ‘FinTech’ is one such terminology. This term is used for describing various operations that are being frequently employed in the financial technology sector. These operations are usually practiced in enterprises or organizations and provide requested services by using Information Technology based applications. The term does take into account various other sensitive issues, like, security, privacy, threats, cyber-attacks, etc. This is important to note that the development of FinTech is indebted to the mutual integration of different state of the art technologies, for example, technologies related to a mobile embedded system, mobile networks, mobile cloud computing, big data, data analytics techniques, and cloud computing etc. However, this technology is facing several security and privacy issues that are much needed to be addressed in order to improve the acceptability of this new technology among its users. In an effort to secure FinTech, this article provides a comprehensive survey of FinTech by reviewing the most recent as well as anticipated financial industry privacy and security issues. It provides a comprehensive analysis of current security issues, detection mechanisms and security solutions proposed for FinTech. Finally, it discusses future challenges to ensure the security and privacy of financial technology applications.
Authenticated encryption (AE) is a cryptographic construction that simultaneously protects confidentiality and integrity. A considerable amount of research has been devoted to the area since its formal inception in 2000. Different lines of research have been proposed to enhance the available schemes in terms of security, efficiency, and design and to implement new ideas. However, a comprehensive systematic literature review (SLR) of the topic has not been provided to the best of the authors’ knowledge. This study fills this gap in the literature by proposing a framework for classifying AE schemes and highlighting past contributions to help researchers familiarize themselves with the current state and directions for future research in the area. This SLR covered AE schemes proposed from 2000 to 2020. A total of 217 articles, selected from eight sources, were categorized into independent schemes, CAESAR competition schemes, and NIST lightweight competition schemes. These schemes were then classified according to their design approaches, security-related properties, and functional features. Our analysis reveals that a significant outstanding challenge in AE is to balance security, efficiency, and the provision of desirable features.