Course Description

This advanced-level course offered by NYUx on Mobile Payments Security provides a comprehensive understanding of the mobile payments ecosystem, focusing on technologies and security practices surrounding mobile payments. Key topics include magnetic stripe and EMV transactions, tokenization, mobile wallets, and various payment methods on digital platforms. The course also delves into mobile security challenges, cryptography, and payments standards providing learners critical insights into securing mobile transactions in the digital payment landscape.

What Students Will Learn

  • Understanding open and closed loop payment systems.
  • Distinguishing between MagStripe and EMV payments and evaluating associated threat models.
  • Exploring contact and contactless payments and their security implications.
  • Learning about mobile issuance versus mobile acquiring and financial institutions' roles.
  • Understanding tokenization and the function of token service providers.
  • Secure enrollment procedures for mobile applications and payment systems.
  • Identifying major drivers for changes in payment technologies and associated fraud implications.

Prerequisites or Skills Necessary

Required is a foundational knowledge in cybersecurity including concepts like cryptography and threat models. A Bachelor's degree in Cybersecurity is optimal for grasping the course content effectively.

Key Topics Covered

  • The evolution and mechanics of payment processing
  • Magnetic Stripe vs. EMV transactions
  • Security measures for contact and contactless payments
  • Overview of payment standards and shifts in the landscape
  • Roles of financial institutions in mobile payments
  • Emerging technologies like tokenization in securing transactions
  • Challenges and solutions in mobile security
  • Future trends and anticipated alterations in payment systems

Who This Course Is For

This course is designed for cybersecurity professionals interested in specializing in the secure management of mobile payments. It is also suitable for students in cybersecurity disciplines aiming to apply their knowledge to real-world digital payment scenarios.

Applicability of Skills in the Real World

Skills acquired from this course can be applied in various roles within financial institutions, cybersecurity firms, and tech companies focusing on developing secure, mobile-based payment solutions. Professionals can use the knowledge to implement robust security measures, manage compliance with payment standards, and innovate secure payment solutions aligned with emerging technologies and threats.

Course Syllabus

Week 1: Payments Overview

  • Payment Fundamentals: Evolution, Processing, and Authentication
  • EMV and Current Cardholder Authentication

Week 2: Introduction to Mobile Payments

  • Defining Mobile Payments and Tokenization
  • Challenges & Standards in Mobile Payments

Week 3: Payment Problems, Threat Models, and Attacks

  • Threat Modeling Specific to Payments
  • Securing Mobile Devices and Payment Implementations

Week 4: The Future of Payments

  • Current Trends and Future Predictions in Payment Technologies
  • Managing New Forms of Fraud and Payment Channels