Mobile payment security, threats, and challenges
Mobile payment security, threats, and challenges
复制标题
DOI：
10.1109/mobisecserv.2016.7440226
复制
发表时间：
2016-02
期刊：
影响因子：
--
通讯作者：
Yong Wang;Christen Hahn;Kruttika Sutrave
中科院分区：
文献类型：
--
作者：
Yong Wang;Christen Hahn;Kruttika Sutrave
移动支付系统可分为5类：POS机移动支付、POS机移动支付、移动支付平台、独立移动支付系统、运营商直接计费。尽管移动支付因其便利性在许多地区得到了普及，但它也面临着许多威胁和安全挑战。在本文中，我们提出了一个移动支付处理模型，并介绍了各种类型的移动支付系统。我们总结了移动支付系统所需的安全服务，以及目前存在的安全机制。我们进一步识别和讨论了移动支付系统中的三种安全威胁，即恶意软件、SSL/TLS漏洞和数据泄露，以及四种安全挑战，即恶意软件检测、多因素认证、数据泄露预防和欺诈检测和预防。
Mobile payment systems can be divided into five categories including mobile payment at the POS, mobile payment as the POS, mobile payment platform, independent mobile payment system, and direct carrier billing. Although mobile payment has gained its popularity in many regions due to its convenience, it also faces many threats and security challenges. In this paper, we present a mobile payment processing model and introduce each type of mobile payment systems. We summarize the security services desired in mobile payment systems and also the security mechanisms which are currently in place. We further identify and discuss three security threats, i.e., malware, SSL/TLS vulnerabilities, and data breaches, and four security challenges, i.e., malware detection, multi-factor authentication, data breach prevention, and fraud detection and prevention, in mobile payment systems.