Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions (Paperback)

Must-have guide for professionals responsible for securing credit and debit card transactions

As recent breaches like Target and Neiman Marcus show, payment card information is involved in more security breaches than any other data type. In too many places, sensitive card data is simply not protected adequately. Hacking Point of Sale is a compelling book that tackles this enormous problem head-on. Exploring all aspects of the problem in detail - from how attacks are structured to the structure of magnetic strips to point-to-point encryption, and more – it's packed with practical recommendations. This terrific resource goes beyond standard PCI compliance guides to offer real solutions on how to achieve better security at the point of sale.

• A unique book on credit and debit card security, with an emphasis on point-to-point encryption of payment transactions (P2PE) from standards to design to application
• Explores all groups of security standards applicable to payment applications, including PCI, FIPS, ANSI, EMV, and ISO
• Explains how protected areas are hacked and how hackers spot vulnerabilities
• Proposes defensive maneuvers, such as introducing cryptography to payment applications and better securing application code

Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions is essential reading for security providers, software architects, consultants, and other professionals charged with addressing this serious problem.

「專為負責保護信用卡和借記卡交易安全的專業人士而設的必備指南」

正如最近的Target和Neiman Marcus等遭受的侵犯事件所顯示的那樣，付款卡信息參與的安全漏洞比其他任何類型的數據都要多。在太多地方，敏感的卡片數據並未得到足夠的保護。《Hacking Point of Sale》是一本引人入勝的書籍，直面這個巨大的問題。從攻擊的結構到磁條的結構，再到點對點加密等各個方面，它詳細探討了問題的所有方面，並提供了實用的建議。這本出色的資源不僅僅是標準的PCI合規指南，還提供了如何在銷售點實現更好安全性的真正解決方案。

• 一本關於信用卡和借記卡安全的獨特書籍，重點介紹了付款交易的點對點加密（P2PE）從標準到設計到應用


• 探討了適用於付款應用程序的所有安全標準組，包括PCI、FIPS、ANSI、EMV和ISO


• 解釋了受保護區域如何被入侵以及黑客如何發現漏洞


• 提出了防禦性的舉措，例如將加密引入付款應用程序和更好地保護應用程序代碼

《Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions》是安全提供商、軟件架構師、顧問和其他負責解決這個嚴重問題的專業人士的必讀之書。