Researchers from the Information Security Group win IEEE Best Practical Paper Award
Prof. David Basin, Dr. Jorge Toro Pozo and Dr. Ralf Sasse from the Information Security Group receive the IEEE Best Practical Paper Award for their publication "The EMV Standard: Break, Fix, Verify".
At the 42nd IEEE Symposium on Security and Privacy, Prof. David Basin, Dr. Jorge Toro Pozo and Dr. Ralf Sasse from the Information Security Group were honoured with the IEEE Best Practical Paper Award.
In their awarded publication "The EMV Standard: Break, Fix, Verify", the researchers present a significant loophole in the EMV (Europay, Mastercard, Visa) standard on which contactless payments are based. The computer scientists have specified a comprehensive model of the EMV protocol, using the Tamarin model checker. With the help of their model, they have identified several authentication flaws that led to two critical attacks affecting credit cards by Visa and by Mastercard.
Read more about security flaws in VISA cards and in Mastercard and Maestro cards.
Uniting research and practice
Since 1980, the IEEE Symposium on Security and Privacy has been the premier forum for presenting developments in computer security and electronic privacy, and for bringing together researchers and practitioners in the field. The 2021 Symposium marked the 42nd annual meeting of this flagship conference.