How could hackers steal millions of credit card numbers from PCI-compliant 
Marriott, Starwood, Sheraton, Westin, Wendy's, Target, Neiman Marcus, Michael's,
Aaron Brothers, Sally Beauty, P.F. Chang’s, Supervalu, Albertson's, Shaw's, Goodwill, UPS, 
Subway, Home Depot, DQ, Kmart, Staples, et al.? 

---

Get NFT
​with the signed
​book cover

NFT with the signed cover

Read an Excerpt
Full Table of Contents
Index

Published: John Wiley & Sons,
312 pages, February 2014, 
Paperback, eBook,
ISBN: 978-1-118-81011-8

---

---

• A unique book on credit and debit card security, with an emphasis on point-to-point encryption of payment transactions (P2PE) from standards to design to application
• Explains how protected areas are hacked and how hackers spot vulnerabilities
• Explores all groups of security standards applicable to payment applications, including PCI, FIPS, ANSI, EMV, and ISO
• Proposes defensive maneuvers, such as introducing cryptography to payment applications and better securing application code

Hacking Point of Sale

Payment Application Secrets, Threats, and Solutions

A book by Slava Gomzin

​Ordering

Paperback: Amazon | B&N | Wiley | Book Depository | Powell's | Flipkart | OZON.ru | 
​Indie Bound | BAM! | AbeBooks | Better World Books | Alibris | Walmart

eBook: Amazon | B&N | Apple iBook | Google Play | Wiley | Kobo | O'Reilly

​Book Reviews

The best information security book of 2014 and some other excellent ones
RSA Conference Blogs
Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions
RSA Conference Blogs
Hacking Point of Sale: Book Review, Webcast & Free Sample Chapter
Tripwire
Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions
Slashdot
Hacking Point of Sale, In-Depth Study on Payment Applications
The Hacker News
​Book Review: "Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions"
Lockboxx

​Interviews

Retail malware: PCI-DSS is part of the problem, says retail security specialist Slava Gomzin
Computing
Q&A with security expert Slava Gomzin on the safest way to pay
Yahoo Finance
ITS Coffee Talks: ITS Partners’ Interview with Slava Gomzin (audio)
ITS Partners

​Related Essays

7 reasons why we’re going to see more card data breaches at our favorite retail stores
Venture Beat
These new mobile wallet apps will make it easier, not harder, for hackers to hijack your payment card
Venture Beat
Target, Neiman-Marcus, Michaels: How PCI data security standards are failing us
Venture Beat

​Live Webcast

HACKING POINT OF SALE: HOW MEGA RETAILERS ARE COMPROMISED
Tripwire
​

All News, Reviews, and Interviews

---

Point of Sale Vulnerability Rank Calculator from Wiley Publishers

POS Vulnerability Rank Calculator is located in Appendix A of the book. Using this questionnaire, which consists of 20 questions,  anyone can conduct a very brief security risk assessment of their point of sale system. The result of the assessment is a numeric score - "POS Vulnerability Rank" - in a range from 0 to 20, where 0 means the perfect system and 20 stands for the most unprotected POS environment. The rank can be interpreted according to the "Decoding the Results" table. Give it a try and and let me know about the results!

---

Book Description

As recent breaches like Target and Neiman Marcus show, payment card information is involved in more security breaches than any other data type. In too many places, sensitive card data is simply not protected adequately. Hacking Point of Sale is a compelling book that tackles this enormous problem head-on. Exploring all aspects of the problem in detail - from how attacks are structured to the structure of magnetic strips to point-to-point encryption, and more – it's packed with practical recommendations. This terrific resource goes beyond standard PCI compliance guides to offer real solutions on how to achieve better security at the point of sale.

Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions is essential reading for security providers, software architects, consultants, and other professionals charged with addressing this serious problem.

Contents at a Glance

Introduction
Part I
Chapter 1
Chapter 2
Chapter 3
PART II
Chapter 4
Chapter 5
Chapter 6
Part III
Chapter 7 
Chapter 8
Chapter 9
   
Appendix A
Appendix B
Index

   
Anatomy of Payment Application Vulnerabilities
Processing Payment Transactions
Payment Application Architecture
PCI
Attacks on Point of Sale Systems
Turning 40 Digits into Gold
Penetrating Security Free Zones
Breaking into PCI Protected Areas
Defence
Cryptography in Payment Applications
Protecting Cardholder Data
Securing Application Code
Conclusion
POS Vulnerability Rank Calculator
Glossary of Terms and Abbreviations
   

xxiii
1
3
25
55
91
93
125
147
165
167
195
219
249
251
257
265

---

View Full Table of Contents