I’ve written elsewhere about the initial uptake of the PCI Secure Software Framework. We’re rapidly approaching the point in time where the PCI PA-DSS will close for new submissions, and the PCI SSF will be the only show in town for PCI software vendors. This page will be updated on approximately a monthly basis, to…
Tag: software
PCI Software Security Framework Adoption [Updated]
The PCI Software Security Framework was introduced by the PCI SSC last year to improve the security of card payment software. Under this framework there are two separate standards: Secure Software Lifecycle Standard – companies operating a secure SDLC validated against the standard Secure Software Standard – software validated against the standard The first assessment…
Open Source Payment HSM Simulators
Most card payments software products are proprietary solutions, developed either in-house or to be sold commercially. Because of this there isn’t much out in the open source world to help you develop your own custom solution. However, there are a few libraries out there that are worth a mention, particularly for simulating and testing HSM…
Choosing Open Source Software for PCI DSS
I’m researching a longer article on some specific software solutions. It caused me to realize that there’s value in creating a checklist of what to look for when trawling github for open source software to use with your payments platform. In doing so, I think I can make a couple of safe assumptions: If you…