Skip to Content
PCI DSS Version 4.0 - A guide to the payment card industry data security standard
book

PCI DSS Version 4.0 - A guide to the payment card industry data security standard

by Stephen Hancock
February 2024
Intermediate to advanced
71 pages
1h 5m
English
IT Governance Publishing
Content preview from PCI DSS Version 4.0 - A guide to the payment card industry data security standard

CHAPTER 13: THE SOFTWARE SECURITY FRAMEWORK (SSF)

The Software Security Framework (SSF) is the PCI SSC-managed programme that focuses on payment applications, such as shopping carts, payment gateways, and so on. It comprises the Secure Software Standard (SSS) and the Secure SLC (software lifecycle) Standard. These replace the old PA-DSS standard for software. Increasingly, criminals are targeting vulnerabilities in payment applications to steal payment card data, and some users may unknowingly have sensitive card data stored on their systems by software. The SSF is therefore meant to help software vendors and others develop secure payment applications that do not store prohibited data, such as full magnetic stripes, CVV2 or personal identification ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

PCI DSS Version 4.0.1 - A Guide to the Payment Card Industry Data Security Standard

PCI DSS Version 4.0.1 - A Guide to the Payment Card Industry Data Security Standard

Stephen Hancock

Publisher Resources

ISBN: 9781787785090Publisher Website