Digital Financial Services (DFS) Security Clinic

The primary objectives of the DFS Security Clinic are to offer insights into the security recommendations for digital financial services (DFS) that regulators and DFS providers can adopt. The Clinic will guide both regulators and DFS providers on addressing threats and vulnerabilities in mobile payment applications operating on USSD, STK, and Android. It will also cover the adoption of security best practices against SIM swaps, how to tackle fraud in DFS, and the importance of regulatory collaboration between the telecom regulator and the central bank for DFS security. Additionally, the session will delve into the services and guidance offered by the ITU DFS Security Lab, aiding regulators in ensuring the security of mobile payment apps in their jurisdictions.

On its second day, the DFS Security Clinic will concentrate on emerging technologies based on blockchain for implementing passwordless authentication in DFS. This approach aims to address the vulnerabilities present in current password-based systems. The session will also introduce new services that the ITU DFS Security Lab plans to offer soon, including methodologies for assessing the cyber resilience of critical infrastructure for DFS and a knowledge-sharing platform on DFS security tailored for regulators and DFS providers.