Table of Contents - X.1456 (04/2025) - Security guidelines for digital financial services applications based on unstructured supplementary service data and subscriber identification module tool kit
1 Scope 2 References 3 Definitions 3.1 Terms defined elsewhere 3.2 Terms defined in this Recommendation 4 Abbreviations and acronyms 5 Conventions 6 Introduction 7 DFS ecosystem components, threats, vulnerabilities and test scenarios 8 Security practices for DFS applications using USSD and STK 8.1 Mitigation against retrieval of user data 8.2 SIM swap and SIM recycling risks mitigation measures 8.3 Remote USSD execution mitigation measures 8.4 SIM exploitation using binary OTA mitigation measures 8.5 Detecting and mitigating social engineering attacks with mobile terminating-USSD Bibliography
|