关键词: 移动支付, PDRR模型, 终端设备, 软件安全, 入侵检测

Abstract: The popularization of mobile payment has brought convenience yet risks to users information and wealth. In recent years, more and more security technologies in this field have been proposed and applied with the deepening of research. In this article, we introduce PDRR model namely a theory of protection, detection, response and recovery, involving patching of hardware and software, active sniffing of latent threat and proper management toward sudden attack and disasters, which supports the security of mobile payment and gives instruction across the board. Besides, we also review major achievements and research directions in this field including security chip, application security, identity authentication with hardware and biological features, magnet secure transmission as a state of art technology and wireless public key infrastructure, etc. Finally，we also talk about big data and block chain which may add to security in the future. As for the technology of big data, it can be applied for net flow analysis which can be used to defend against advanced persistent threat, while block chain is considered to be a brand framework of mobile payment in the future.

Key words: mobile payment, PDRR model, terminal device, software security, intrusion detection