Skip to content
Open access

Preventing Cross-Tenant Data Exposure in Financial Platforms Through AI-Assisted Security and Enterprise Architecture Controls

Aug 2026 · AI and Machine Learning Advances · Vol 02, pp. 72-86 · 0 citations

TL;DR

A framework for the enterprise architecture which combines tenant isolation, identity management, API gateway enforcement, secure identifiers, immutable audit logs, and AI-driven risk detection is introduced, which views AI as an assistive overlay that enhances rather than substitutes for deterministic architectural controls.

Abstract

Modern financial platforms are increasingly offering banking, payments, wealth management, and other financial services through shared multi-tenant architectures. However, with the sharing of data among tenants, significant security concerns arise that may not be completely addressed by traditional controls. This paper introduces a framework for the enterprise architecture which combines tenant isolation, identity management, API gateway enforcement, secure identifiers, immutable audit logs, and AI-driven risk detection. Unlike previous approaches, which mainly focused on AI model creation, this framework views AI as an assistive overlay that enhances rather than substitutes for deterministic architectural controls. We have enumerated nine cross-tenant exposure vectors, outlined a layered architecture with eight levels of control, and demonstrated, using scenario-based metrics, the added security value in the use of AI-driven anomaly detection and policy violation analysis. The paper also provides implementation guidance, data privacy considerations, and adoption planning for financial platform architectures. The proposed framework brings together enterprise security architecture and AI-driven risk intelligence to enable financial systems to be resilient across multiple tenants.

Read PDF

Similar papers

Aug 2026

Analysis of Privacy Infringement Mechanisms by Data Lifecycle in AI-based Investigative Systems and Design of Integrated Control Governance

This study analyzes the cascading risk mechanisms across the data lifecycle in core AI investigative systems like facial recognition and predictive policing and proposes an integrated governance framework based on ‘Security by Design’ principles, combining technical defenses with policy controls.

Sejin Oh, Hea Joung Yoo · 0 citations
Open access Aug 2026

AUDITING ARTIFICAL INTELLIGENCE

A comprehensive and risk-based AI audit methodology that integrates governance, data security, model security, and application security dimensions into a unified control framework is proposed, offering organizations a robust tool to manage emerging AI-related risks effectively.

Osman Turan, Z. Müftüoğlu, Tolga Özbilge · 0 citations
Review Open access Sep 2026

Artificial Intelligence - Model Context Protocol - Review of Real-World Security Threats

The findings demonstrate that safeguarding agentic AI frameworks require multi-layered technical controls, zero-trust architecture, automated schema validation, and strict identity governance, rather than reliance on static boundary controls.

Upendra Kanuru, Alexa Schmitt · 0 citations
Open access Sep 2026

Cybersecurity Failures in Enterprise MDM Platforms

Mobile Device Management (MDM) platforms have evolved into critical components of enterprise security architectures, influencing device governance, access control and policy enforcement across corporate networks. As these systems increasingly operate as centralised control planes, they have become attractive targets fo...

István Paráda · 0 citations
Open access Aug 2026

SecureFedShield: An Adaptive Privacy-Preserving Federated Defense Framework Against Adversarial Attacks in Financial Fraud Detection

SecureFedShield is proposed, a privacy-preserving federated learning framework designed for secure financial fraud detection in adversarial environments that integrates adaptive privacy protection, trust-aware client evaluation, adversarial update detection, and robust model aggregation into a unified architecture.

Kriti Mishra · 0 citations
Open access Sep 2026

Decomposing Ponzi Schemes: Multi-aspect Lifecycle Analysis for Detecting Fraudulent Smart Contracts

Smart contracts have enabled decentralized financial applications, enabling trustless and transparent asset management. However, their programmability also expands the attack surface, allowing adversaries to encode fraudulent economic behaviors directly into contract logic. Among these threats, Smart Contract Ponzi Sch...

Yi-Zhou Chen, Ze-Yu Sun, Guo-Qing Wang et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.