सॉफ्टवेयर एवं सूचना प्रौद्योगिकी प्रबंध केंद्र

The Centre for Software and Information Technology Management (CSITM) consolidates research, consulting, teaching and training efforts on management issues concerning the Indian and Global Software Industry, while fostering close links with the software industry.

The Software Industry is characterized by swift and continual changes. Individuals and organizations have to be able to learn, change and adapt constantly or risk obsolescence.

The Centre, through its research programmes and other academic activities, sustains the leading edge character of the PGPEM and other programmes offered to the IT industry. The activity of the Centre is guided by an Advisory Board, which sets policies and directions of development for the programme.

Contact:

Centre for Software and Information Technology Management (CSITM)
Indian Institute of Management Bangalore, Bannerghatta Road, Bengaluru 560076
Phone: +91- 80- 2699 3352 / 2699 3353
Email: csitm[at]iimb[dot]ac[dot]in

• Create a significant body of research on the management of software and IT based on the work done by IIMB faculty and students.
• Provide a platform for the identification of both relevant and potentially path-breaking streams of research by inviting leading academics and practitioners.
• Focus IIMB research efforts in this area by bringing together faculty and students and designing appropriate research programmes and projects.
• Catalyze research in the area by holding conferences, workshops and other events.
• Secure external funding for research activities on the research themes chosen by the centre.
• Disseminate research findings through journal papers, books, monographs, web publishing and other media.
• Provide seed funding for research on to faculty and students at IIMB.
• Promote research collaboration between IIMB faculty and students and renowned academic/research institutions worldwide and leading corporations.

Report:  User-Level Security Issues in Mobile Payments

With the rapid development of information technology, ubiquitous mobile phones, and the impact of the demonetization scheme of the Government of India, India has experienced a significant surge in the number of electronic transactions through mobile payment apps and services. However, around the world, spread of electronic banking has resulted in thousands of cybercrimes and monetary thefts by cybercriminals. The security risks related to electronic transactions through mobile payments are high due to various technological and other reasons. In this study we focus on the risks associated with Indian mobile phone based payment systems. We conducted experiments with five popular mobile payment systems in four broad categories – wallets (PayTM, FreeCharge), direct link with user’s bank (BHIM), specific bank’s app for account holders (iMobile by ICICI Bank), and basic USSD service (dialing *99#).

In our study, we evaluated the apps on the following six key security principles combining the Basel Committee’s ‘Risk Management Principles for Electronic Banking’ and the RBI norms for electronic banking transactions:

• The potential for confidentiality breaches
• The management of the transactions for subsequent repudiation
• The strength of the authentication process
• The data and transaction integrity procedures
• The extent of access and availability of services
• The procedures for maintaining privacy of customer information

We found that apps and services that were evaluated have security concerns based on one or more of the six principles. However, even while we were conducting the study, we observed that the features of the apps and services were constantly evolving and changing. Hence, we would like to add the caveat that the evaluation of the apps in this report is as observed during our study conducted between December’16 – January’17, and it is highly likely that some of the concerns presented in this report have been addressed, and perhaps new concerns have emerged.

For a detailed report on the study, please click here