[HGI-News-de] HGI Kolloquium 10.12 - Security Analysis of Contactless Payment Systems in Practice

[Newsletter des Horst Görtz Instituts]

Hallo,

im Rahmen des HGI Kolloquiums "Aktuelle Themen der IT-Sicherheit" wird 
am kommenden Donnerstag der folgende Vortrag angeboten:

Michael Silbermann
* Security Analysis of Contactless Payment Systems in Practice *

Termin:
Donnerstag, den 10. Dezember um 11.00 Uhr (*s.t.*)
Raum: IC 4/161

Interessierte sind herzlichst eingeladen!


==============================================================
Abstract:
We investigated a real-world contactless payment application based on
Mifare Classic cards. In order to analyze the security of the payment
system, we combined previous cryptanalytical results and implemented an
improved card-only attack with customized low-cost tools, that is to our
knowledge the most efficient practical attack to date. We found several
flaws implying severe security vulnerabilities on the system level that
allow for devastating attacks including card cloning, recharging and
identity theft, and demonstrate these attacks in practice. Finally, we
propose improvements that increase the overall security of the system,
and hence can minimize losses due to fraud, with only small effort and
cost.
==============================================================

Vorankündigung: 17. Dezember 2009: Ralph Her­ken­hö­ner - 14. Januar 
2010, (!10:15!): Wilfried Karden (Innenministerium NRW), 
Wirtschaftsspionage - 21. Januar 2010: Orr Dunkelman (Weizmann Institute 
of Science), KATAN & KTANTAN - A Family of Small and Efficient 
Hardware-Oriented Block Ciphers - 28. Januar 2010: Daehyun Strobel 
(EmSec), TBA - 4. Februar 2010: Florian Kerschbaum (SAP), Security 
Challenges in Supply Chain Management.

Informationen über die nächsten geplanten Vorträge im Rahmen des HGI 
Kolloquiums sind auch im Web zu finden:
http://www.hgi.rub.de/hgi/hgi-seminar/aktuelles


Viele Grüße,
Georg Becker und Timo Kasper