Payment Systems: The Art of Analyzing Mag-stripe, Tokenization, NFC and EMV Technologies

Payment Systems training offers a holistic approach to understanding and mastering the intricacies of various banking data formats such as EMV, NFC, Tokenized, and Magstripe. Instead of merely concentrating on specific tools, our emphasis is on the underlying methodologies and communication protocols. This approach ensures a more profound and enduring grasp of the subject matter.

The training is meticulously structured around different technologies and their respective communication protocols. This division facilitates an easier and more comprehensive understanding, enabling participants to effectively conceptualize techniques. Our intensive hands-on sessions are designed to immerse students in real-world scenarios that center on EMV standards. This not only provides a practical perspective but also challenges them to discern how malicious entities might navigate, exploit, or bypass security mechanisms within payment systems. Furthermore, participants will gain insights into the countermeasures implemented across various technologies, ensuring that they are well-equipped to anticipate and address potential vulnerabilities.

There are many questions that this training will try to solve, such as, how difficult was to make a contact or NFC relay attack? Is it possible? What type of hardware is involved in attack surface? What are the limitations in a relay approach and its characteristics? Is it possible to replay a tokenized number from a third-party technology? Or to downgrade an EMV transaction in the actual payment systems? Can we relay contact EMV data over internet?

About the Speaker

Salvador Mendoza

Salvador has been a speaker at high-level events such as Black Hat USA, DEF CON, HITB, and Troopers, among others. His experience as a speaker at these prestigious conferences is a testament to his knowledge and leadership in the field of cybersecurity.

In addition, Salvador has stood out for his contribution to the development of pentesting tools specifically designed for the evaluation of payment systems and tokenization processes. These tools are valuable to the cybersecurity community in detecting and mitigating threats.

Likewise, Salvador is the author of the book “Show me the (e-) money: Hacking digital payment systems: NFC, RFID, MST and EMV Chips”, a work that delves into various attack techniques on digital payment systems, consolidating his position as an expert in the field.

Salvador currently holds the position of Director of Research and Development at Metabase Q, and is an active member of the Ocelot Offensive Security team. His passion for digital security and his influence in the cybersecurity community continue to constantly grow, being a reference in this field.