Abstract

Abstract: In this talk I will review developments in online and electronic payment in the last two decades.  Since the world-wide web emerged in the early nineties we have seen dramatic changes in how we pay, including the proliferation of online payment, the introduction of mobile and contactless payment as well as the rise of bitcoin.   Security is a key concern in the design and use of these payment methods, but these cannot be understood without also considering legacy issues, usability concerns and business incentives.  I will start from a landscaping exercise conducted in 2015, mapping the current online credit card payment system.  I’ll discuss the inherent vulnerabilities of the system, the competing incentives of the many parties that are involved in payment and the role of PCI DSS and other approaches to resolve security challenges.  This talk exposes attendees to the relevant industrial standards and approaches, introduces some cutting-edge research outcomes, and provides insight in the many competing concerns that impact on the online payment security.

Bio: Mohammed Aamir Ali is currently a Ph.D. research student at the centre of cybercrime and computer security at Newcastle University, UK. His research centres around exploiting the potential vulnerabilities in the payment eco-system (i.e. NFC mobile payments, payment applications and online payments). Understanding the insidious tactics targeting the world of cyber systems gives Mohammed an in-depth insight into the methods and psychology of attackers. He has ongoing research which involves landscaping the developments and security challenges in the ecommerce.