Chip Security TestingΒ 
Binary Security AnalysisΒ 
ResourcesΒ 
Blog
Contact us
eShard
/
PCI MPoC

PCI MPoC: Mobile Payments on COTS

Prepare for the future of mobile payments with PCI MPoC (Mobile Payments on Common-of-the-shelf devices). Developed by the PCI Security Standards Council, this new mobile payment standard combines PIN entry and contactless card processing on a single mobile device and converts a mobile phone or table into a payment acceptance device.
Embrace the Future of Mobile Payments
Standard Mobile Payment Security PCI MPoC

Unlocking Secure Mobile Payments with PCI MPoC

At eShard, we are leading experts in mobile app security and have extensive experience in mobile payment security standards. We offer specialized security services catered to PCI MPoC software and solution providers, such as SDK and app developers, as well as A&M service and MPoC solution providers.

Embrace the future of secure mobile payments with confidence. With eShard as your trusted partner, you will be able to navigate in this new ecosystem and meet PCI MPoC requirements with ease.

Security Policy - esChecker MAST

Offensive and Defensive Training Modules

Our specialized training modules cater specifically to developers, equipping them with the knowledge and techniques to strengthen mobile app security. In the Offensive Training Modules, developers learn to think and attack like real-world adversaries, enabling them to develop effective defensive measures The Defensive Training Module focuses on understanding common vulnerabilities and implementing resilient code.

All modules include both theory and hands-on practical exercises, ensuring a highly effective learning experience. Elevate your mobile app security expertise and enroll in our training modules today.

Enhance Your Mobile App Security Skills
Audit and Pentesting Mobile App Security

PCI MPoC Technical Security Pre-Assessment

Our Technical Security Pre-Assessment module offers a comprehensive review of your security design, selected portions of the source code, and the binary release candidate in alignment with the PCI MPoC security requirements. Our experts ensure that you are fully prepared to apply for the formal security evaluation at the PCI MPoC lab.

This module is key to bring you to the right security level, and allows saving time and avoiding unnecessary test cycle iterations during the PCI MPoC lab assessment. By taking advantage of our technical security pre-assessment, you can confidently streamline the evaluation process and enhance your chances of a successful outcome.

Prepare for a Smooth Evaluation Process
esCoaching Cybersecurity Training

PCI MPoC Consultancy & Expertise Support

Our team of dedicated security experts will guide and assist you from start to finish, ensuring a smooth process until the security evaluation at the PCI MPoC lab is completed and final approval is obtained. Count on us to address even non-security related questions that may arise during the project.

Unlock the full potential of your project

Prepare for the future in 4 steps

Step 1: Foundation Workshop

Understand the program and the security requirements.

Step 2: Train your team for secure coding

Practical training for secure coding an Android or iOS application.

Step 3: Diagnostic of your solution

Review security design & architecture and penetration testing on the mobile app and backend.

Step 4: Consultancy & Expertise

Our team of experts by your side throughout the entire project until the final approval at the PCI MPoC lab.

Get started with PCI MPoC

Training tools

eShard provides a pathway from the Android and iOS basics to advanced attack techniques.
Intermediate
Dynamic Analysis of an Android application
Coach: Tiana Razafindralambo
This modules focuses on dynamic analysis techniques. It is split in two parts: the first one is focused on tools and techniques that can be used for the Java code, and the second one for the native code. Trainees will learn how to debug an application using different alternatives, and also how to instrument the code using FRIDA.
See more details
Intermediate
Dynamic Analysis of an iOS application
Coach: Tiana Razafindralambo
In this module, you will get knowledge on dynamic analysis techniques to understand the inner workings of an iOS application. You will see the different steps of analysing an application at runtime from the repackaging process of an application to the use of an instrumentation framework.
All
Mobile Application Defensive Development (Android)
Coach: Tiana Razafindralambo, Yoan Lefevre
The primary focus is understanding the typical weaknesses of mobile applications and the resulting know-how to implement sustainable code resilient to attacks. You choose your development framework (Flutter, React), we provide the mobile application. The provided mobile application is non secure. You run static and dynamic testing with regards to a subset of the [OWASP Mobile Application Security Testing Guide](https://github.com/OWASP/owasp-mastg) test cases. After identifying the different attack vectors and the potential attack paths that might be leveraged by an attacker, the trainees must plan and design the different protection layers to implement with the aim of shielding the application against reverse engineering and attacks.
CopyRights eShard 2024.
All rights reserved
Privacy policy | Legal Notice