Conference talks, research demonstrations, and media interviews from the Khwarizmi Lab. Videos are linked from the corresponding entries in our publications.
USENIX Security
A live demonstration of the Zombie Card attack: an expired Visa card completes a $100 contactless transaction at a real point-of-sale terminal.
First Alert 4
First Alert 4 covers the Zombie Card attack and its implications for expired contactless cards.
WMAR-2 News
A WMAR-2 News segment on the Zombie Card attack and the risks posed by some expired contactless cards.
USENIX Security Symposium
This paper investigates the security of digital wallet transactions, highlighting vulnerabilities in authentication, authorization, and access control. It exposes weaknesses in decentralized authority delegation, allowing attackers to add stolen bank cards, bypass payment authorization, and violate access control policies. The findings underscore the severity of these vulnerabilities, prompting proposed remedies to enhance security measures in digital wallet systems.
NBC / NECN
A NECN interview with Professor Muhammad Taqi Raza about using digital wallets safely.
Symposium on Usable Privacy and Security (SOUPS)
Digital wallet transactions often rely on wallet-level identities instead of verifying the actual cardholder. This talk examines how that trust model enables stolen-card enrollment and authorization bypasses, and proposes user-centered verification such as push-based multi-factor authentication and periodic re-authentication.
