Information Security News: Re: [Dataloss] Fringe: e-banking not yet secure

[InfoSec News <alerts () infosecnews org>]

Forwarded from: Adam Shostack <adam (at) homeport.org>

On Fri, Jul 25, 2008 at 02:26:18AM +0000, security curmudgeon wrote:
| : Over 75% of banking Web sites contain fundamental design flaws that 
| : could put customers at risk from cyber thieves, according to a study 
| : (of 214 bank web sites)conducted by researchers at the University of 
| : Michigan.
| 
| Unfortunately, all I can find are articles mentioning the study. It 
| still isn't available on Atul Prakash's home page [1]. Since all we 
| have to go on right now are sound bytes and brief summaries, it is 
| very easy to tear large holes in the results. I encourage Prakash and 
| his team to make the original research more readily available.

http://cups.cs.cmu.edu/soups/2008/program.html
http://cups.cs.cmu.edu/soups/2008/proceedings/p117Falk.pdf


_______________________________________________      
Attend Black Hat USA, August 2-7 in Las Vegas, 
the world's premier technical event for ICT security experts.
Featuring 40 hands-on training courses and 80 Briefings 
presentations with lots of new content and new tools.
Network with 4,000 delegates from 50 nations.  
Visit product displays by 30 top sponsors in 
a relaxed setting. http://www.blackhat.com