Enhancing the Security of Visa 3-D Secure against Spoofing Attacks

Visa 3-D Secure is an e-payment system based on the integration of SSL/TLS with the three-domain architecture. It employs cryptographic techniques to secure communication links among participants in e-commerce transactions and also provides credit card verification via Visa Secure Server. Although several security vulnerabilities can be addressed, spoofing attacks are still effective and can be considered as potential threats to Visa 3D Secure. Threats of spoofing and impersonation have become more effective due to advances in computing and communications technologies. However, security mechanisms incompatible with the past e-payment infrastructure are also enabled by these technological advances. PKI-based authentications used in the SET scheme can be considerable in the current era for enhancing the security of Visa 3-D Secure against spoofing attacks. Keywords— Certification Authorities (CAs), Public Key Infrastructure (PKI), Secure Electronic Transactions (SET), Spoofing Attacks, Visa 3-D Secure