Chapter 17 References

Books

• David A. O’Sullivan, The Law of Financial Privacy and Protection, Thomson Reuters.
• Rishabh Sarma, Identity Management: Concepts, Technologies, and Architecture, Artech House.
• Rishabh Sarma, Verifiable Credentials and Decentralized Identity, independently published.
• NIST Special Publication 800-63, Digital Identity Guidelines, National Institute of Standards and Technology.
• OWASP, Web Security Testing Guide, OWASP Foundation.
• Financial Action Task Force, International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation, FATF.

Websites

• FATF standards and guidance — AML/CFT standards, risk-based approaches, and recommendations.
• FinCEN Financial Trend Analysis — suspicious activity typologies and reporting context.
• FinCEN SAR filing guidance — US suspicious activity reporting requirements and forms.
• OFAC sanctions list search — official sanctions data search and list resources.
• United Nations Security Council Consolidated List — UN sanctions list and amendments.
• W3C Verifiable Credentials Data Model — credential, issuer, holder, verifier, and proof data model.
• W3C Decentralized Identifiers — DID syntax, DID documents, resolution, and method requirements.
• FIDO Alliance WebAuthn specification — WebAuthn protocol, authenticator data, and client authentication ceremonies.
• OpenID Connect Core — OIDC ID tokens, authorization requests, and user claims.
• OAuth 2.0 Security Best Current Practice — authorization-server and client security guidance.
• SAML 2.0 Technical Overview — SAML assertions, protocols, bindings, and profiles.
• ISO/IEC 30107-3 presentation attack detection — biometric presentation-attack detection terminology and testing.
• NIST Digital Identity Guidelines — identity proofing, authentication, and federation assurance guidance.
• EASL Verify — European digital identity wallet reference resources.
• NIST Privacy Framework — risk-based privacy controls for identity and biometric processing.