Show simple item record

dc.contributor.advisorΚάτσικας, Σωκράτης
dc.contributor.authorΔέλγα, Αγγελική
dc.date.accessioned2015-06-28T09:03:58Z
dc.date.available2015-06-28T09:03:58Z
dc.date.issued2014-11
dc.identifier.urihttps://dione.lib.unipi.gr/xmlui/handle/unipi/6698
dc.format.extent61el
dc.language.isoelel
dc.publisherΠανεπιστήμιο Πειραιώςel
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 Διεθνές*
dc.rights.urihttp://creativecommons.org/licenses/by-nc-nd/4.0/*
dc.subjectΠροστασία δεδομένων -- Πρότυπαel
dc.subjectData protection -- Standardsel
dc.subjectΔίκτυα υπολογιστών -- Μέτρα ασφαλείαςel
dc.subjectComputer networks -- Security measuresel
dc.subjectCredit cards -- Security measuresel
dc.titleCompliance of an airline company with the payment card industry data security standard (PCI DSS): case studyel
dc.typeMaster Thesisel
dc.contributor.departmentΣχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα Ψηφιακών Συστημάτωνel
dc.identifier.call008.8 ΔΕΛel
dc.description.abstractENThe Payment Card Industry Data Security Standard is a set of twelve security requirements that applies to all institutions and systems handling, storing or transmitting cardholder information. It was created by the main card brands in a united effort to respond to the increasing number of attacks and data breach cases targeted and linked to card and cardholder data. The standard considers points such as policy design, data security, network architecture, software design, application security, transmission encryption requirements and so on. Being compliant with the standard can be both expensive and time consuming for any business willing to do so. Given the complexity of the business environment of Airline Companies, the cost for compliance increases. Airline companies operate differently to other merchants due to the involvement of multiple entities during the whole process, which initiates from the customer's purchase of a ticket and ends at customers boarding to the airplane. These entities, including travel agencies, airline companies, airports, as well as service and network providers, that check seats availability, issue tickets, process payments and so on, may have access to cardholder data and consequently may pose great risk for security of cardholder data. Cardholder data are often used for functions, other than completing the payment. For instance, many airlines use payment card data as a unique form of identity for their customers. Card data is passed through systems at the time of reservation and then used at check-in to verify the customer's identity. Moreover, travel agents use systems provided by a Global Distribution System (GDS) provider that link to the airline systems to check ticket availability, to financial systems for authorization and then to IATA (International Air Transport Association) systems for clearing and settlement purposes. This is a case study, based on a real situation, where the current state of an airline company (infrastructure, applications, information security policies and procedures) is going to be evaluated against the requirements of the Payment Card Industry Data Security Standard (PCI DSS) and recommendations will be made in order for the company to comply with the standard. Moreover, the present study is going to analyze in depth the difficulties that arise towards compliance with the PCI DSS standard in the airline industry from the involvement of multiple entities and to make suggestions, requiring the smallest possible cost and effort for the organization that can help to overcome such difficulties.el
dc.contributor.masterΤεχνοοικονομική Διοίκηση και Ασφάλεια Ψηφιακών Συστημάτωνel


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record

Attribution-NonCommercial-NoDerivatives 4.0 Διεθνές
Except where otherwise noted, this item's license is described as
Attribution-NonCommercial-NoDerivatives 4.0 Διεθνές

Βιβλιοθήκη Πανεπιστημίου Πειραιώς
Contact Us
Send Feedback
Created by ELiDOC
Η δημιουργία κι ο εμπλουτισμός του Ιδρυματικού Αποθετηρίου "Διώνη", έγιναν στο πλαίσιο του Έργου «Υπηρεσία Ιδρυματικού Αποθετηρίου και Ψηφιακής Βιβλιοθήκης» της πράξης «Ψηφιακές υπηρεσίες ανοιχτής πρόσβασης της βιβλιοθήκης του Πανεπιστημίου Πειραιώς»