WO2008014507A3 - Systèmes et procédés pour évaluer la performance d'un vendeur de déchiffrage - Google Patents

Systèmes et procédés pour évaluer la performance d'un vendeur de déchiffrage Download PDF

Info

Publication number
WO2008014507A3
WO2008014507A3 PCT/US2007/074725 US2007074725W WO2008014507A3 WO 2008014507 A3 WO2008014507 A3 WO 2008014507A3 US 2007074725 W US2007074725 W US 2007074725W WO 2008014507 A3 WO2008014507 A3 WO 2008014507A3
Authority
WO
WIPO (PCT)
Prior art keywords
systems
methods
vendor
scoring
scanning
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2007/074725
Other languages
English (en)
Other versions
WO2008014507A2 (fr
Inventor
Fernando Lourenco
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Mastercard International Inc
Original Assignee
Mastercard International Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from PCT/US2007/070709 external-priority patent/WO2007146772A2/fr
Application filed by Mastercard International Inc filed Critical Mastercard International Inc
Publication of WO2008014507A2 publication Critical patent/WO2008014507A2/fr
Publication of WO2008014507A3 publication Critical patent/WO2008014507A3/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/06—Buying, selling or leasing transactions
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/577—Assessing vulnerabilities and evaluating computer system security
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2153—Using hardware token as a secondary aspect

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Business, Economics & Management (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Accounting & Taxation (AREA)
  • Computing Systems (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Cash Registers Or Receiving Machines (AREA)

Abstract

L'invention concerne des systèmes, des dispositifs informatiques et des procédés pour qualifier des vendeurs de déchiffrage dans l'industrie du paiement par carte. La qualification des vendeurs peut assurer la conformité avec des normes de sécurité dans l'industrie du paiement par carte. La qualification d'un vendeur implique le test de l'aptitude du vendeur à découvrir et à identifier un ensemble établi de vulnérabilités dans une situation de données simulée. Les procédures d'évaluation du vendeur impliquent la considération du caractère exploitable, de la gravité et du poids des vulnérabilités découvertes.
PCT/US2007/074725 2006-07-28 2007-07-30 Systèmes et procédés pour évaluer la performance d'un vendeur de déchiffrage Ceased WO2008014507A2 (fr)

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US83396906P 2006-07-28 2006-07-28
US60/833,969 2006-07-28
USPCT/US2007/070709 2007-06-08
PCT/US2007/070709 WO2007146772A2 (fr) 2006-06-08 2007-06-08 Qualification des fournisseurs de balayage pour mettre en œuvre des procédures de sécurité de l'industrie des cartes de paiement

Publications (2)

Publication Number Publication Date
WO2008014507A2 WO2008014507A2 (fr) 2008-01-31
WO2008014507A3 true WO2008014507A3 (fr) 2008-11-06

Family

ID=38982424

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2007/074725 Ceased WO2008014507A2 (fr) 2006-07-28 2007-07-30 Systèmes et procédés pour évaluer la performance d'un vendeur de déchiffrage

Country Status (1)

Country Link
WO (1) WO2008014507A2 (fr)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CA2765792C (fr) * 2009-06-17 2017-03-28 Nanopharmaceuticals Llc Formulations nanoparticulaires et polymeres pour hormone thyroidienne, analogues, antagonistes et formulations et utilisations de celles-ci
RU2627386C1 (ru) * 2016-06-14 2017-08-10 Евгений Борисович Дроботун Стенд для испытаний автоматизированных систем в условиях воздействия вредоносных программ
RU2640629C1 (ru) * 2017-04-27 2018-01-10 Евгений Борисович Дроботун Способ оценки эффективности функционирования автоматизированных систем управления в условиях воздействия вредоносных программ
US10706156B2 (en) * 2017-10-13 2020-07-07 1230604 BC Ltd. Security risk identification in a secure software lifecycle
EP3671614B1 (fr) * 2018-12-18 2026-03-25 Mastercard International Incorporated Dispositif de sécurité informatique
CN114881503B (zh) * 2022-05-19 2025-09-12 中国第一汽车股份有限公司 一种评分确定方法、装置、设备及存储介质
US12386977B2 (en) * 2022-11-03 2025-08-12 Cisco Technology, Inc. System and method for evaluating penetration testing tools
US12608484B2 (en) 2023-12-22 2026-04-21 Capital One Services, Llc Systems and methods for translating different vulnerability scan results into a standardized format and for certifying target resources against detection of vulnerabilities
US12468816B2 (en) * 2023-12-22 2025-11-11 Capital One Services, Llc Systems and methods for translating different vulnerability scan results into a standardized format and for certifying target resources against detection of vulnerabilities

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6185689B1 (en) * 1998-06-24 2001-02-06 Richard S. Carson & Assoc., Inc. Method for network self security assessment
US20040073445A1 (en) * 2002-07-01 2004-04-15 First Data Corporation Methods and systems for performing security risk assessments of internet merchant entities
US20040241627A1 (en) * 2003-03-21 2004-12-02 Raymond Delfing Method & system for providing orientation/training and controlling site access
US6901346B2 (en) * 2000-08-09 2005-05-31 Telos Corporation System, method and medium for certifying and accrediting requirements compliance
US6993448B2 (en) * 2000-08-09 2006-01-31 Telos Corporation System, method and medium for certifying and accrediting requirements compliance
WO2006033727A2 (fr) * 2004-08-17 2006-03-30 Mastercard International Incorporated Evaluation de conformite et test de securite de cartes intelligentes

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6185689B1 (en) * 1998-06-24 2001-02-06 Richard S. Carson & Assoc., Inc. Method for network self security assessment
US6901346B2 (en) * 2000-08-09 2005-05-31 Telos Corporation System, method and medium for certifying and accrediting requirements compliance
US6993448B2 (en) * 2000-08-09 2006-01-31 Telos Corporation System, method and medium for certifying and accrediting requirements compliance
US20040073445A1 (en) * 2002-07-01 2004-04-15 First Data Corporation Methods and systems for performing security risk assessments of internet merchant entities
US20040241627A1 (en) * 2003-03-21 2004-12-02 Raymond Delfing Method & system for providing orientation/training and controlling site access
WO2006033727A2 (fr) * 2004-08-17 2006-03-30 Mastercard International Incorporated Evaluation de conformite et test de securite de cartes intelligentes

Also Published As

Publication number Publication date
WO2008014507A2 (fr) 2008-01-31

Similar Documents

Publication Publication Date Title
WO2008014507A3 (fr) Systèmes et procédés pour évaluer la performance d'un vendeur de déchiffrage
WO2008005679A3 (fr) Procédé et appareil de qualification des performances d'un turbocompresseur
WO2008103286A3 (fr) Evaluation et analyse des défauts de sécurité logicielle
WO2007103591A3 (fr) Procédé et appareil permettant de tester un système de traitement de données
WO2007079499A3 (fr) Plateforme hôte de confiance
WO2007120845A3 (fr) Procédé et système de simulation de rétention d'état d'une conception rtl
WO2010033375A3 (fr) Emulation de dispositif de stockage de masse sata sur une interface pcie
WO2003067405A3 (fr) Test automatise contre la menace a la securite de pages web
EP2169584A3 (fr) Service de balayage antivirus basé sur le matériel
HK1257497A1 (zh) 评估网络安全技术的有效性
WO2009120331A3 (fr) Procédé et système pour l'essai automatisé d'applications informatiques
WO2015077564A3 (fr) Génération de facteurs de pondération pour apprentissage automatique
WO2011139815A3 (fr) Système et procédé d'authentification de dispositifs d'entrée
WO2008089068A3 (fr) Analyse de signaux sans fil dans des environnements de jeu de pari
EP1942424A3 (fr) Transmission de données d'arrière-plan entre un dispositif média et dispositif hôte
MX2008012891A (es) Sistema y metodo de deteccion de software dañino para plataformas moviles de acceso limitado.
WO2009016988A1 (fr) Appareil de traitement, système d'usinage de trou central, programme de décision de la position du trou central, et procédé de décision de la position du trou central
WO2006091726A8 (fr) Procede de modelisation et d'essai d'un systeme de securite
EP2187310A3 (fr) Procédé et système de simulation de plusieurs dispositifs
WO2006112989A3 (fr) Preconditionnement de simulation stochastique de l'efficacite d'un systeme informatique
WO2008069971A3 (fr) Appareil et procédés associés pour diagnostiquer des défaillances de configuration
WO2012142324A3 (fr) Système de test sans contact
WO2008119755A3 (fr) Système et procédé permettant d'établir un seuil pour les notifications de panne d'alimentation de système dans un système de traitement des données
Dong et al. Automated verification of security pattern compositions
FR2905497B1 (fr) Procede de simulation du comportement thermo-mecanique d'un pneu, et application

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07813537

Country of ref document: EP

Kind code of ref document: A2

NENP Non-entry into the national phase

Ref country code: DE

NENP Non-entry into the national phase

Ref country code: RU

122 Ep: pct application non-entry in european phase

Ref document number: 07813537

Country of ref document: EP

Kind code of ref document: A2