Last week I attended ACM WiSec. Of course, only
virtually. The first virtual conference I attended. Coincidentally, it was also
the first conference I presented at. While the experience was quite different
from a “real” conference, the organizers did a great job to make the experience
as good as possible with, for example, a mattermost instance to interact with
other conference participants.
In the following, I will list a few talks and papers that I either found very
interesting or that generally stood out to me:
On September 14th the final deadline of complying with the new Payment Service
Directive PSD2 will be reached. Among other things, this directive will bring
quite a few technical challenges for credit institutions. These include new
requirements on two-factor authentication and API access for third parties. In
this blog post we will give a short overview of what this means for banks from a
security perspective and outline a few of the security-related issues based on
what we have been observing during recent assessments of such APIs.