Protecting self-hosted payment systems against ransomware: a comprehensive guide

Rogers, Buck and Beange, Scott Protecting self-hosted payment systems against ransomware: a comprehensive guide. Journal of Financial Services, 1. pp. 154-160.

Preview

Text (Published version) 15836 Rogers (2025) Protecting self-hosted payment systems.pdf - Published Version Available under License Creative Commons Attribution 4.0. Download (304kB) | Preview

Abstract

This paper explores the growing threat of ransomware to self-hosted payment systems, which are increasingly targeted due to the sensitive financial data they handle and their operational importance. It examines the evolving tactics used by ransomware actors, including double extortion and backup destruction, and identifies common vulnerabilities in payment infrastructure such as weak access controls, unpatched systems, and insufficient segmentation. Drawing on industry best practices and peerreviewed research, this article outlines a multi-layered defense strategy incorporating strong access controls, endpoint protection, immutable offline backups, staff training, and incident response planning. It also stresses the importance of threat intelligence and compliance with standards like PCI DSS. The paper concludes with actionable recommendations to help financial organizations enhance resilience, minimize operational disruption, and reduce the likelihood of ransom payments.

Item Type:	Article
Article Type:	Article
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:	Schools and Research Institutes > School of Business, Computing and Social Sciences
Depositing User:	Rhiannon Goodland
Date Deposited:	11 Feb 2026 10:33
Last Modified:	12 Feb 2026 14:45
URI:	https://eprints.glos.ac.uk/id/eprint/15836

University Staff: Request a correction | Repository Editors: Update this record