Security assessment of payment systems under PCI DSS incompatibilities

Şerif Bahtiyar; Gürkan Gür; Levent Altay

doi:10.1007/978-3-642-55415-5_33

Security assessment of payment systems under PCI DSS incompatibilities

Şerif Bahtiyar
, Gürkan Gür
, Levent Altay

Mastercard

Araştırma sonucu: Kitap/Rapor/Konferans Bildirisinde Bölüm › Konferans katkısı › bilirkişi

7 Atıf (Scopus)

Özet

With the ubiquitous proliferation of electronic payment systems, data and application security has become more critical for financial operations. The Payment Card Industry Data Security Standard (PCI DSS) has been developed by the payment industry to provide a widelyapplicable and definitive security compliance among all components in electronic payment infrastructure. However, the security impact of PCI DSS incompatibilities and relevant security assessment approaches for such cases are yet to be investigated in a comprehensive manner. Therefore, in this paper we present a security assessment framework for payment systems under PCI DSS incompatibilities. Moreover, we analyze a case study to evaluate our proposal and to provide some guidelines to security experts for assessment of PCI DSS compliance.

Orijinal dil	İngilizce
Ana bilgisayar yayını başlığı	ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings
Editörler	Nora Cuppens-Boulahia, Frédéric Cuppens, Sushil Jajodia, Anas Abou El Kalam, Thierry Sans
Yayınlayan	Springer Science and Business Media, LLC
Sayfalar	395-402
Sayfa sayısı	8
ISBN (Elektronik)	9783642554148
DOI'lar	https://doi.org/10.1007/978-3-642-55415-5_33
Yayın durumu	Yayınlandı - 2014
Harici olarak yayınlandı	Evet
Etkinlik	29th IFIP TC 11 International Conference, SEC 2014 - Marrakesh, Morocco Süre: 2 Haz 2014 → 4 Haz 2014

Yayın serisi

Adı	IFIP Advances in Information and Communication Technology
Hacim	428
ISSN (Basılı)	1868-4238
ISSN (Elektronik)	1868-422X

???event.eventtypes.event.conference???

???event.eventtypes.event.conference???	29th IFIP TC 11 International Conference, SEC 2014
Ülke/Bölge	Morocco
Şehir	Marrakesh
Periyot	2/06/14 → 4/06/14

Bibliyografik not

Publisher Copyright:
© IFIP International Federation for Information Processing 2014.

Belgeye Erişim

10.1007/978-3-642-55415-5_33

Diğer Dosyalar ve Linkler

Link to publication in Scopus

Alıntı Yap

Bahtiyar, Ş., Gür, G., & Altay, L. (2014). Security assessment of payment systems under PCI DSS incompatibilities. In N. Cuppens-Boulahia, F. Cuppens, S. Jajodia, A. A. E. Kalam, & T. Sans (Eds.), ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings (pp. 395-402). (IFIP Advances in Information and Communication Technology; Hac. 428). Springer Science and Business Media, LLC. https://doi.org/10.1007/978-3-642-55415-5_33

Bahtiyar, Şerif ; Gür, Gürkan ; Altay, Levent. / Security assessment of payment systems under PCI DSS incompatibilities. ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings. editör / Nora Cuppens-Boulahia ; Frédéric Cuppens ; Sushil Jajodia ; Anas Abou El Kalam ; Thierry Sans. Springer Science and Business Media, LLC, 2014. pp. 395-402 (IFIP Advances in Information and Communication Technology).

@inproceedings{7961c2c38b1a4f03861f4577c6ea8bab,

title = "Security assessment of payment systems under PCI DSS incompatibilities",

abstract = "With the ubiquitous proliferation of electronic payment systems, data and application security has become more critical for financial operations. The Payment Card Industry Data Security Standard (PCI DSS) has been developed by the payment industry to provide a widelyapplicable and definitive security compliance among all components in electronic payment infrastructure. However, the security impact of PCI DSS incompatibilities and relevant security assessment approaches for such cases are yet to be investigated in a comprehensive manner. Therefore, in this paper we present a security assessment framework for payment systems under PCI DSS incompatibilities. Moreover, we analyze a case study to evaluate our proposal and to provide some guidelines to security experts for assessment of PCI DSS compliance.",

keywords = "Data and applications security, PCI DSS, Payment system security, Risk analysis, Security assessment",

author = "{\c S}erif Bahtiyar and G{\"u}rkan G{\"u}r and Levent Altay",

note = "Publisher Copyright: {\textcopyright} IFIP International Federation for Information Processing 2014.; 29th IFIP TC 11 International Conference, SEC 2014 ; Conference date: 02-06-2014 Through 04-06-2014",

year = "2014",

doi = "10.1007/978-3-642-55415-5\_33",

language = "English",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer Science and Business Media, LLC",

pages = "395--402",

editor = "Nora Cuppens-Boulahia and Fr{\'e}d{\'e}ric Cuppens and Sushil Jajodia and Kalam, \{Anas Abou El\} and Thierry Sans",

booktitle = "ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings",

address = "United States",

}

Bahtiyar, Ş, Gür, G & Altay, L 2014, Security assessment of payment systems under PCI DSS incompatibilities. in N Cuppens-Boulahia, F Cuppens, S Jajodia, AAE Kalam & T Sans (eds), ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings. IFIP Advances in Information and Communication Technology, hac. 428, Springer Science and Business Media, LLC, pp. 395-402, 29th IFIP TC 11 International Conference, SEC 2014, Marrakesh, Morocco, 2/06/14. https://doi.org/10.1007/978-3-642-55415-5_33

Security assessment of payment systems under PCI DSS incompatibilities. / Bahtiyar, Şerif; Gür, Gürkan; Altay, Levent.
ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings. ed. / Nora Cuppens-Boulahia; Frédéric Cuppens; Sushil Jajodia; Anas Abou El Kalam; Thierry Sans. Springer Science and Business Media, LLC, 2014. p. 395-402 (IFIP Advances in Information and Communication Technology; Hac. 428).

Araştırma sonucu: Kitap/Rapor/Konferans Bildirisinde Bölüm › Konferans katkısı › bilirkişi

TY - GEN

T1 - Security assessment of payment systems under PCI DSS incompatibilities

AU - Bahtiyar, Şerif

AU - Gür, Gürkan

AU - Altay, Levent

N1 - Publisher Copyright: © IFIP International Federation for Information Processing 2014.

PY - 2014

Y1 - 2014

N2 - With the ubiquitous proliferation of electronic payment systems, data and application security has become more critical for financial operations. The Payment Card Industry Data Security Standard (PCI DSS) has been developed by the payment industry to provide a widelyapplicable and definitive security compliance among all components in electronic payment infrastructure. However, the security impact of PCI DSS incompatibilities and relevant security assessment approaches for such cases are yet to be investigated in a comprehensive manner. Therefore, in this paper we present a security assessment framework for payment systems under PCI DSS incompatibilities. Moreover, we analyze a case study to evaluate our proposal and to provide some guidelines to security experts for assessment of PCI DSS compliance.

AB - With the ubiquitous proliferation of electronic payment systems, data and application security has become more critical for financial operations. The Payment Card Industry Data Security Standard (PCI DSS) has been developed by the payment industry to provide a widelyapplicable and definitive security compliance among all components in electronic payment infrastructure. However, the security impact of PCI DSS incompatibilities and relevant security assessment approaches for such cases are yet to be investigated in a comprehensive manner. Therefore, in this paper we present a security assessment framework for payment systems under PCI DSS incompatibilities. Moreover, we analyze a case study to evaluate our proposal and to provide some guidelines to security experts for assessment of PCI DSS compliance.

KW - Data and applications security

KW - PCI DSS

KW - Payment system security

KW - Risk analysis

KW - Security assessment

UR - https://www.scopus.com/pages/publications/84926483384

U2 - 10.1007/978-3-642-55415-5_33

DO - 10.1007/978-3-642-55415-5_33

M3 - Conference contribution

AN - SCOPUS:84926483384

T3 - IFIP Advances in Information and Communication Technology

SP - 395

EP - 402

BT - ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings

A2 - Cuppens-Boulahia, Nora

A2 - Cuppens, Frédéric

A2 - Jajodia, Sushil

A2 - Kalam, Anas Abou El

A2 - Sans, Thierry

PB - Springer Science and Business Media, LLC

T2 - 29th IFIP TC 11 International Conference, SEC 2014

Y2 - 2 June 2014 through 4 June 2014

ER -

Bahtiyar Ş, Gür G, Altay L. Security assessment of payment systems under PCI DSS incompatibilities. In Cuppens-Boulahia N, Cuppens F, Jajodia S, Kalam AAE, Sans T, editörler, ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings. Springer Science and Business Media, LLC. 2014. p. 395-402. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-642-55415-5_33

Security assessment of payment systems under PCI DSS incompatibilities

Özet

Yayın serisi

???event.eventtypes.event.conference???

Bibliyografik not

Belgeye Erişim

Diğer Dosyalar ve Linkler

Parmak izi

Alıntı Yap