Robbing the bank using formal methods

Add to your list(s) Download to your calendar using vCal

• Joeri de Ruiter
• Thursday 03 April 2014, 11:00-12:00
• Room 245, School of Computer Science.

If you have a question about this talk, please contact Vincent Cheval.

EMV is a standard for electronic payments using smart cards. It is widely used and in The Netherlands introduced as ‘het nieuwe pinnen’. The specification is over 700 pages and includes a lot of options. Attacks have been published on We used formal methods to analyse the security of the standard. To analyse actual implementations, active learning techniques are used to discover the internal state machines of bank cards. These techniques can also be applied on a handheld reader that is used for internet banking. Previously, a vulnerability in this reader was discovered. In the models that are learned we can see this problem and see that it is fixed in a new version of the device.

This talk is part of the Computer Security Seminars series.

This talk is included in these lists:

• Computer Science Departmental Series
• Computer Science Distinguished Seminars
• Computer Security Seminars
• Room 245, School of Computer Science
• computer sience

Note that ex-directory lists are not shown.