Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Security Certification in Payment Card Industry: Testbeds, Measurements,
  and Recommendations   The massive payment card industry (PCI) involves various entities such as
merchants, issuer banks, acquirer banks, and card brands. Ensuring security for
all entities that process payment card information is a challenging task. The
PCI Security Standards Council requires all entities to be compliant with the
PCI Data Security Standard (DSS), which specifies a series of security
requirements. However, little is known regarding how well PCI DSS is enforced
in practice. In this paper, we take a measurement approach to systematically
evaluate the PCI DSS certification process for e-commerce websites. We develop
an e-commerce web application testbed, BuggyCart, which can flexibly add or
remove 35 PCI DSS related vulnerabilities. Then we use the testbed to examine
the capability and limitations of PCI scanners and the rigor of the
certification process. We find that there is an alarming gap between the
security standard and its real-world enforcement. None of the 6 PCI scanners we
tested are fully compliant with the PCI scanning guidelines, issuing
certificates to merchants that still have major vulnerabilities. To further
examine the compliance status of real-world e-commerce websites, we build a new
lightweight scanning tool named PciCheckerLite and scan 1,203 e-commerce
websites across various business sectors. The results confirm that 86% of the
websites have at least one PCI DSS violation that should have disqualified them
as non-compliant. Our in-depth accuracy analysis also shows that
PciCheckerLite's output is more precise than w3af. We reached out to the PCI
Security Council to share our research results to improve the enforcement in
practice.

9
The categories of this paper are: nlin
33
The categories of this paper are: plasm-ph
31
The categories of this paper are: ao-sci
0
The categories of this paper are: hep-ph
6
The categories of this paper are: astro-ph
28
The categories of this paper are: alg-geom
25
The categories of this paper are: patt-sol
30
The categories of this paper are: q-alg
24
The categories of this paper are: dg-ga
29
The categories of this paper are: funct-an
18
The categories of this paper are: econ
17
The categories of this paper are: q-fin
36
The categories of this paper are: cmp-lg
16
The categories of this paper are: stat
34
The categories of this paper are: chem-ph
8
The categories of this paper are: hep-ex