Visa Inc. · NYSE:V
Visa — Technical Presentation (August 2014)
22 slides from Visa's technical presentation, Aug 20, 2014
Slide 1: 2014 North America Payment Card Security & Technology Symposium
2014 North America Payment Card Security & Technology Symposium Securing Our Future Growth: Then, Now and into the Future Webinar 20 August 2014 Visa Public
Slide 2: Disclaimer
Disclaimer The information or recommendations contained herein are provided "AS IS" and intended for informational purposes only and should not be relied upon for operational, marketing, legal, technical, tax, financial or other advice. When implementing any new strategy or practice, you should cons
Slide 3: 2014 North America Payment Card Security and Technology Webinar Agenda
2014 North America Payment Card Security and Technology Webinar Agenda Presenter: Glen Jones, Senior Director | Global Forensic Intelligence, Visa Inc. • Understanding the Evolution of Malware • Optimizing Card-Not-Present Fraud Prevention Strategies Presenter: John Sheets, Senior Director | Risk Pr
Slide 4: Understanding the Evolution of Malware; Optimizing Card-Not-Present Fraud Prevention Strategies
Understanding the Evolution of Malware Optimizing Card-Not-Present Fraud Prevention Strategies Glen Jones, Senior Director Global Forensic Intelligence, Visa Inc. 4 | 2014 North America Payment Card Security & Technology Symposium Recap | 20 August 2014 Visa Public
Slide 5: Advanced Payment Card-Stealing Malware
Advanced Payment Card-Stealing Malware Customized, Persistent Attach to Payment Endpoints Stealth Deployment, Distribution and Exfiltration Data Collection Evade Detection 5 | 2014 North America Payment Card Security & Technology Symposium Recap | 20 August 2014 Visa Public
Slide 6: Evolution of Malware Panel – Key Takeaways
Evolution of Malware Panel – Key Takeaways POS malware has evolved from simple, commodity-variety to 1 customized, very difficult-to-detect software Detecting POS malware involves a combination of host and network 2 monitoring Detection cannot be done with tools alone, must include human action 3 an
Slide 7: Card Not Present – Key Takeaways
Card Not Present – Key Takeaways With the continued growth of the CNP channel 1 and US migration to EMV, CNP fraud is expected to increase before it stabilizes While multiple authentication solutions are available and used by payments participants the 2 key challenge for all stakeholders is to balan
Slide 8: Demystifying Tokenization, Navigating U.S. EMV Implementation, Managing Mobile Payments Risk
Demystifying Tokenization Navigating U.S. EMV Implementation Managing Mobile Payments Risk John Sheets, Senior Director Risk Products and Business Intelligence, Visa Inc. 8 | 2014 North America Payment Card Security & Technology Symposium Recap | 20 August 2014 Visa Public
Slide 9: Payment Token Definition
Payment Token Definition Tokenization involves the replacement of the card- account number with a “non-financial identifier” which may be used in its stead to initiate payment activity Uses for Tokens • Conduct payment transactions over online and mobile payment channels • Provide a method for third
Slide 10: Demystifying Tokenization - Payment Token Processing
Demystifying Tokenization - Payment Token Processing 1. Token Request Process Token Requestor Visa Token Service Issuer Card # Token Request Token Issuer Assurance, Identity and Verification (ID&V) 2. Token Authorization Process Authorization Request Merchant Acquirer Visa Token Service Issuer 1 2 3
Slide 11: Demystifying Tokenization – Benefits for Ecosystem Participants
Demystifying Tokenization – Benefits for Ecosystem Participants Common tokenization standard minimizes impact by ensuring compatibility with current payment technologies and enabling support for emerging payment innovations Merchant/ Cardholder Wallet Provider Acquirer Issuer • Card re-issuance not
Slide 12: Demystifying Tokenization – Key Activities
Demystifying Tokenization – Key Activities Industry Standard • Donated to EMVCo by Visa • A new EMVCo task force established to govern the standard going forward VisaNet Processing • November 2013 Technical Letter • April 2014 Business Enhancements Release Visa Payment Token Service • Mid-2014 limit
Slide 13: Demystifying Tokenization – Key Takeaways
Demystifying Tokenization – Key Takeaways Tokenization has two main components: standard and 1 service 2 Token replaces account number with a non-financial identifier Issuers, acquirers/merchants, wallet providers and OEMs 3 can be potential token requestors A single PAN can have multiple tokens bas
Slide 14: Navigating U.S. EMV Implementation – Key Takeaways
Navigating U.S. EMV Implementation – Key Takeaways Chip is not a silver bullet – continue using a multi-layered approach to 1 fraud management As US EMV migration continues, there are already encouraging signs of progress in card issuance and terminal installation and at the 2 industry level in addr
Slide 15: Managing Mobile Risk - Impact of Innovation
Managing Mobile Risk - Impact of Innovation Enabling Payments Everyone Everywhere Every Channel • Network of agents • Enable new business • Customized shopping • Technological models: Long-tail of preferences compatibility merchants • Frictionless checkout • Low cost • Multiple channels • Trust and
Slide 16: Managing Mobile Risk - Key Takeaways
Managing Mobile Risk - Key Takeaways Use Existing Baselines and Strategies 1 All existing strategies, risk frameworks, process and procedures in place to address either fraud or data security risk applies for new technologies. 2 Focus on incremental changes Identify the incremental changes brought a
Slide 17: Approaching the Intersection of Cyber Security and Privacy
Approaching the Intersection of Cyber Security and Privacy Jessica Scheppmann, Counsel Corporate Legal, Visa Inc. 17 | 2014 North America Payment Card Security & Technology Symposium Recap | 20 August 2014 Visa Public
Slide 18: Cyber Security and Privacy
Cyber Security and Privacy • Privacy – Based on societal norms that people are entitled to keep aspects of their lives and activities private. • History – – Europe – In Europe and other countries that have followed its lead, privacy is considered a fundamental human right that requires entities to i
Slide 19: Cyber Security and Privacy - Discussions
Cyber Security and Privacy - Discussions • Which consumers are most focused on data security and privacy? • What are consumers’ top concerns with respect to data security and privacy? • Why should merchants care about consumer privacy? 19 | 2014 North America Payment Card Security & Technology Sympo
Slide 20: Cyber Security and Privacy - Key Takeaways
Cyber Security and Privacy - Key Takeaways The majority of consumers today are making buying decisions based on their perception of a merchant’s commitment to data 1 security. Maintaining trust is paramount to acquiring and preserving customer relationships. Although there is no sign of a uniform U.
Slide 21: Upcoming Events and Resources
Upcoming Events and Resources PCI Security Standards Council (SSC) North America Community Meeting: http://community.pcisecuritystandards.org/2014/ • September 9 - 11, 2014 • Orlando, Florida • Visa Acquirer Roundtable on September 9, 3 pm – 5 pm EST ‒ For acquirers only ‒ Email cisp@visa.com for mo
Slide 22: Questions?
Questions? Visa Public