Author

Gabriel Bello

Date of Award

2019

Type

Thesis

Major

Computer Science - Applied Computing Track

Degree Type

Bachelor of Science Computer Science

Department

TSYS School of Computer Science

First Advisor

Dr. Alfredo Perez

Second Advisor

Dr. Yesem Peker

Third Advisor

Dr. Lydia Ray

Abstract

Traditional payment systems have standards designed to keep transaction data secure, but blockchain systems are not in scope for such security standards. We compare the Payment Application Data Security Standard’s (PA-DSS) applicability towards transaction-supported blockchain platforms to test the standard’s applicability. By highlighting the differences in implementation on traditional and decentralized transaction platforms, we critique and adapt the standards to fit the decentralized model. In two case studies, we analyze the QTUM and Ethereum blockchain platforms’ industry compliance, as their payment platforms support transactions equivalent to that of applications governed by the PA-DSS. We determine QTUM’s and Ethereum’s capabilities to properly ensure secure data handling with respect to current security standards. After adapting the PA-DSS and analyzing the QTUM and Ethereum platforms, we revise the new set of standards to create a set of best-practices for ensuring data security on both traditional and blockchain payment systems. We report the security gaps identified on each platform based on the final revision of the standards, presenting a conclusive perspective that neither platform is suitable for business adoption based on the PA-DSS standard’s results. Finally, we discuss open research issues.

Share

COinS