How secure are chip-based cards?
Source: Vistar Communications for Paladion , Author: Prashant Verma
Posted: Thu August 30, 2018 5:35 pm

UAE. Chip based cards having Wifi icon work on RFID or NFC technologies (but not on WiFi). It operates in nearby local field. This is like our MiFi based access card, which is flashed against a reading device to record our attendance or grant us door access.

The user of such a card walks near to the payment terminal (RFID or NFC reader) and flashes the card and a debit happens.
 
How this can be hacked?
A rouge reading device need to carried by hacker to sniff or record the authentication data from card (CVV number, expiry date etc). If you and me are doing a handshake, your wallet in your pocket has a NFC card and my pocket has a battery operated reader, your card emits and my reader sniffs. I can clone your card or use card auth data I recorded to transact fraudulently.
 
What can user do?
NFC protected wallets, that contain the emanation within the wallet (plenty of them available in ecommerce websites. Home remedy or hacks like wrap your nfc card in aluminium foil do work sometimes.
 
What can card issuers and payment processors do?
Secure the card data by adapting adequate protection of authentication and encryption data. Remember PCI DSS standards and apply them in the context of NFC and RFID.

NFC technology specific secure configurations need to be applied.

Photo Caption: Prashant Verma, AVP – Threat Management at Paladion

 

MIDDLE EAST BUSINESS COMMENT & ANALYSIS

date:Posted: April 15, 2019
UAE. Digital organizations have a vast attack surface making it prohibitive to secure them completely using conventional techniques.
date:Posted: April 15, 2019
UAE. Artificial Intelligence (AI) is all about machines, obviously. Except it's not. AI is all about us - the humans - and how it can make our lives better; Companies need to find the workflows inside their business models that can benefit from AI.
date:Posted: April 14, 2019
INTERNATIONAL. Emerging Risks Monitor Report shows concern about new regulations across geographic areas.
UAE. Artificial Intelligence (AI) is all about machines, obviously. Except it's not. AI is all about us - the humans - and how it can make our lives better; Companies need to find the workflows inside their business models that can benefit from AI.
dhgate