CERB Banking: How to secure online banking and keep the users happy?

Add to your list(s) Download to your calendar using vCal

• Pawel Jakub Dawidek
• Tuesday 22 January 2013, 16:15-17:15
• Lecture Theatre 2, Computer Laboratory, William Gates Building.

If you have a question about this talk, please contact Laurent Simon.

Abstract: CERB Banking is an authentication system used to secure authentication to online banking sites as well as to sign transactions. The main authentication method is mobile application, which generates one-time passwords and confirmation codes to sign transactions.

To our knowledge CERB Banking deployed in 2008 for Eurobank in Poland was the first such solution in the world: a mobile application that was able to protect users against Man-in-the-Browser attacks by presenting transaction details and sign transactions.

The talk will provide in-depth analysis of the system and mobile application security, including details not disclosed anywhere else.

Bio: Pawel Jakub Dawidek is coowner of the WHEEL Systems company and the main architect of the CERB authentication system. Pawel is also long time FreeBSD committer working mostly on security- and storage-related aspects of the system.

This talk is part of the Computer Laboratory Security Seminar series.

This talk is included in these lists:

• All Talks (aka the CURE list)
• Cambridge talks
• Computer Laboratory Security Seminar
• Department of Computer Science and Technology talks and seminars
• Interested Talks
• Lecture Theatre 2, Computer Laboratory, William Gates Building
• School of Technology
• Security-related talks
• Trust & Technology Initiative - interesting events
• bld31

Note that ex-directory lists are not shown.