{"id":"https://openalex.org/W4417458455","doi":"https://doi.org/10.1109/isdfs69419.2026.11458981","title":"Weak Enforcement and Low Compliance in PCI DSS: A Comparative Security Study","display_name":"Weak Enforcement and Low Compliance in PCI DSS: A Comparative Security Study","publication_year":2026,"publication_date":"2026-03-19","ids":{"openalex":"https://openalex.org/W4417458455","doi":"https://doi.org/10.1109/isdfs69419.2026.11458981"},"language":null,"primary_location":{"id":"doi:10.1109/isdfs69419.2026.11458981","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs69419.2026.11458981","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 14th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2512.13430","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Soonwon Park","orcid":null},"institutions":[{"id":"https://openalex.org/I125467818","display_name":"Dakota State University","ror":"https://ror.org/016yv6y68","country_code":"US","type":"education","lineage":["https://openalex.org/I125467818"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Soonwon Park","raw_affiliation_strings":["The Beacom College of Computer and Cyber Sciences, Dakota State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Beacom College of Computer and Cyber Sciences, Dakota State University","institution_ids":["https://openalex.org/I125467818"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022580647","display_name":"John D. Hastings","orcid":"https://orcid.org/0000-0003-0871-3622"},"institutions":[{"id":"https://openalex.org/I125467818","display_name":"Dakota State University","ror":"https://ror.org/016yv6y68","country_code":"US","type":"education","lineage":["https://openalex.org/I125467818"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John D. Hastings","raw_affiliation_strings":["The Beacom College of Computer and Cyber Sciences, Dakota State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Beacom College of Computer and Cyber Sciences, Dakota State University","institution_ids":["https://openalex.org/I125467818"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I125467818"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00407778,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.40459999442100525,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.40459999442100525,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.1331000030040741,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.04259999841451645,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/conventional-pci","display_name":"Conventional PCI","score":0.7799999713897705},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.7488999962806702},{"id":"https://openalex.org/keywords/sanctions","display_name":"Sanctions","score":0.6712999939918518},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.5515000224113464},{"id":"https://openalex.org/keywords/credit-card","display_name":"Credit card","score":0.5016999840736389},{"id":"https://openalex.org/keywords/license","display_name":"License","score":0.4814000129699707},{"id":"https://openalex.org/keywords/payment-card","display_name":"Payment card","score":0.4584999978542328}],"concepts":[{"id":"https://openalex.org/C45393284","wikidata":"https://www.wikidata.org/wiki/Q191012","display_name":"Conventional PCI","level":3,"score":0.7799999713897705},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.7488999962806702},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.6812999844551086},{"id":"https://openalex.org/C2778069335","wikidata":"https://www.wikidata.org/wiki/Q32098","display_name":"Sanctions","level":2,"score":0.6712999939918518},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6323999762535095},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.5515000224113464},{"id":"https://openalex.org/C2983355114","wikidata":"https://www.wikidata.org/wiki/Q161380","display_name":"Credit card","level":3,"score":0.5016999840736389},{"id":"https://openalex.org/C2780560020","wikidata":"https://www.wikidata.org/wiki/Q79719","display_name":"License","level":2,"score":0.4814000129699707},{"id":"https://openalex.org/C21021354","wikidata":"https://www.wikidata.org/wiki/Q1207171","display_name":"Payment card","level":3,"score":0.4584999978542328},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.43970000743865967},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.4016999900341034},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.37470000982284546},{"id":"https://openalex.org/C2777303138","wikidata":"https://www.wikidata.org/wiki/Q13499","display_name":"Debit card","level":4,"score":0.34709998965263367},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.3156000077724457},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.29190000891685486},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.25940001010894775}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/isdfs69419.2026.11458981","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs69419.2026.11458981","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 14th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2512.13430","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2512.13430","pdf_url":"https://arxiv.org/pdf/2512.13430","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:arXiv.org:2512.13430","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2512.13430","pdf_url":"https://arxiv.org/pdf/2512.13430","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:doi:10.48550/arxiv.2512.13430","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2512.13430","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2512.13430","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2512.13430","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2512.13430","pdf_url":"https://arxiv.org/pdf/2512.13430","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417458455.pdf","grobid_xml":"https://content.openalex.org/works/W4417458455.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Although":[0],"credit":[1],"and":[2,62,81,96,109,126,128,132,146,163],"debit":[3],"card":[4,38,170],"data":[5],"continue":[6],"to":[7,16,64,70,78,156],"be":[8],"a":[9,58,114],"prime":[10],"target":[11],"for":[12],"attackers,":[13],"organizational":[14],"adherence":[15],"the":[17,134,147],"Payment":[18],"Card":[19],"Industry":[20],"Data":[21],"Security":[22],"Standard":[23],"(PCI":[24],"DSS)":[25],"remains":[26],"surprisingly":[27],"low.":[28],"Despite":[29],"prior":[30],"work":[31],"showing":[32],"that":[33,86,97],"PCI":[34,74,87,138,165],"DSS":[35,75,88,166],"can":[36],"reduce":[37,159],"fraud,":[39],"only":[40],"32.4%":[41],"of":[42,102,137,149,161],"organizations":[43],"were":[44],"fully":[45],"compliant":[46],"in":[47,52,73,76],"2022,":[48],"suggesting":[49],"possible":[50],"deficiencies":[51],"enforcement":[53,67,120],"mechanisms.":[54],"This":[55],"study":[56],"employs":[57],"comparative":[59],"analysis":[60,84],"(qualitative":[61],"indicator-based)":[63],"examine":[65],"how":[66],"mechanisms":[68],"relate":[69],"implementation":[71,130],"success":[72],"relation":[77],"HIPAA,":[79],"NIS2,":[80],"GDPR.":[82],"The":[83,111],"reveals":[85],"significantly":[89],"lags":[90],"far":[91],"behind":[92],"these":[93],"security":[94],"frameworks":[95],"its":[98],"sanctions":[99,145],"are":[100,154],"orders":[101],"magnitude":[103],"smaller":[104],"than":[105],"those":[106],"under":[107],"GDPR":[108],"NIS2.":[110],"findings":[112],"indicate":[113],"positive":[115],"association":[116],"between":[117],"stronger,":[118],"multi-modal":[119],"(including":[121],"public":[122],"disclosure,":[123],"license":[124],"actions,":[125],"imprisonment)":[127],"higher":[129],"rates,":[131],"highlight":[133],"structural":[135],"weakness":[136],"DSS's":[139],"bank-dependent":[140],"monitoring":[141],"model.":[142],"Enhanced":[143],"non-monetary":[144],"creation":[148],"an":[150],"independent":[151],"supervisory":[152],"authority":[153],"recommended":[155],"increase":[157],"transparency,":[158],"conflicts":[160],"interest,":[162],"improve":[164],"compliance":[167],"without":[168],"discouraging":[169],"acceptance.":[171]},"counts_by_year":[],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-12-17T00:00:00"}