{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,22]],"date-time":"2026-10-22T00:16:59Z","timestamp":1792628219008,"version":"4.5.0"},"publisher-location":"Cham","reference-count":26,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030783747","type":"print"},{"value":"9783030783754","type":"electronic"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-78375-4_1","type":"book-chapter","created":{"date-parts":[[2021,6,9]],"date-time":"2021-06-09T04:12:10Z","timestamp":1623211930000},"page":"3-26","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Breaking and Fixing Third-Party Payment Service for Mobile Apps"],"prefix":"10.1007","author":[{"given":"Shangcheng","family":"Shi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xianbo","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wing Cheong","family":"Lau","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,6,10]]},"reference":[{"key":"1_CR1","unstructured":"Apkpure: Apkpure (2019). https:\/\/apkpure.com\/"},{"key":"1_CR2","doi-asserted-by":"crossref","unstructured":"Chen, S., et al.: An empirical assessment of security risks of global android banking apps. In: ICSE 2020 (2020)","DOI":"10.1145\/3377811.3380417"},{"key":"1_CR3","unstructured":"Chen, Y., et al.: Devils in the guidance: predicting logic vulnerabilities in payment syndication services through automated documentation analysis. In: USENIX 2019 (2019)"},{"key":"1_CR4","unstructured":"Fortune Business Insights: Mobile payment market size, share & industry analysis (2020). https:\/\/www.fortunebusinessinsights.com\/industry-reports\/mobile-payment-market-100336"},{"key":"1_CR5","doi-asserted-by":"crossref","unstructured":"Hardt, D.: The OAuth 2.0 authorization framework (2012)","DOI":"10.17487\/rfc6749"},{"key":"1_CR6","doi-asserted-by":"crossref","unstructured":"Haupert, V., Maier, D., M\u00fcller, T.: Paying the price for disruption: how a fintech allowed account takeover. In: ROOTS 2017 (2017)","DOI":"10.1145\/3150376.3150383"},{"key":"1_CR7","unstructured":"Jones, M., et al.: JSON web token (JWT) (2012)"},{"issue":"6","key":"1_CR8","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1016\/S1361-3723(07)70077-5","volume":"2007","author":"S Kadhiwal","year":"2007","unstructured":"Kadhiwal, S., Zulfiquar, A.U.S.: Analysis of mobile payment security measures and different standards. Comput. Fraud Secur. 2007(6), 12\u201316 (2007)","journal-title":"Comput. Fraud Secur."},{"key":"1_CR9","doi-asserted-by":"crossref","unstructured":"Kaur, R., Li, Y., Iqbal, J., Gonzalez, H., Stakhanova, N.: A security assessment of HCE-NFC enabled e-wallet banking android apps. In: COMPSAC 2018, vol. 02 (2018)","DOI":"10.1109\/COMPSAC.2018.10282"},{"key":"1_CR10","unstructured":"Kumar, R., Kishore, S., Lu, H., Prakash, A.: Security analysis of unified payments interface and payment apps in India. In: USENIX Security 2020 (2020)"},{"issue":"4","key":"1_CR11","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2541315","volume":"46","author":"X Li","year":"2014","unstructured":"Li, X., Xue, Y.: A survey on server-side approaches to securing web applications. ACM Comput. Surv. 46(4), 1\u201329 (2014)","journal-title":"ACM Comput. Surv."},{"key":"1_CR12","doi-asserted-by":"publisher","first-page":"13898","DOI":"10.1109\/ACCESS.2019.2963480","volume":"8","author":"W Liu","year":"2020","unstructured":"Liu, W., Wang, X., Peng, W.: State of the art: secure mobile payment. IEEE Access 8, 13898\u201313914 (2020)","journal-title":"IEEE Access"},{"key":"1_CR13","doi-asserted-by":"crossref","unstructured":"Lodderstedt, T., McGloin, M., Hunt, P.: OAuth 2.0 threat model and security considerations (2013)","DOI":"10.17487\/rfc6819"},{"key":"1_CR14","unstructured":"MITRE: CVE-2018-13439 (2018). https:\/\/www.cvedetails.com\/cve\/CVE-2018-13439\/"},{"key":"1_CR15","doi-asserted-by":"crossref","unstructured":"Mulliner, C., Robertson, W., Kirda, E.: VirtualSwindle: an automated attack against in-app billing on android. In: ASIA CCS 2014 (2014)","DOI":"10.1145\/2590296.2590335"},{"key":"1_CR16","unstructured":"PHP: API document of hash function in PHP (2020). https:\/\/www.php.net\/manual\/en\/function.hash.php"},{"key":"1_CR17","unstructured":"Reaves, B., Scaife, N., Bates, A., Traynor, P., Butler, K.R.: Mo(bile) money, mo(bile) problems: analysis of branchless banking applications in the developing world. In: USENIX Security 2015 (2015)"},{"key":"1_CR18","unstructured":"Reynaud, D., Song, D., Magrino, T.R., Wu, E., Shin, E.C.: FreeMarket: shopping for free in android applications. In: NDSS 2012 (2012)"},{"key":"1_CR19","doi-asserted-by":"crossref","unstructured":"Sun, F., Xu, L., Su, Z.: Detecting logic vulnerabilities in e-commerce applications. In: NDSS 2014 (2014)","DOI":"10.14722\/ndss.2014.23351"},{"key":"1_CR20","unstructured":"Tumbleson, C.: Apktool (2020). https:\/\/ibotpeaches.github.io\/Apktool\/"},{"key":"1_CR21","doi-asserted-by":"crossref","unstructured":"Wang, R., Chen, S., Wang, X.F., Qadeer, S.: How to shop for free online security analysis of cashier-as-a-service based web stores. In: S&P 2011 (2011)","DOI":"10.1109\/SP.2011.26"},{"key":"1_CR22","doi-asserted-by":"crossref","unstructured":"Wang, Y., Hahn, C., Sutrave, K.: Mobile payment security, threats, and challenges. In: MobiSecServ 2016 (2016)","DOI":"10.1109\/MOBISECSERV.2016.7440226"},{"key":"1_CR23","unstructured":"Wikipedia: Client Certificate (2020). https:\/\/en.wikipedia.org\/wiki\/Client_certificate"},{"key":"1_CR24","unstructured":"Xing, L., Chen, Y., Wang, X., Chen, S.: InteGuard: toward automatic protection of third-party web service integrations. In: NDSS 2013 (2013)"},{"key":"1_CR25","doi-asserted-by":"crossref","unstructured":"Yang, W., et al.: Show me the money! finding flawed implementations of third-party in-app payment in android apps. In: NDSS 2017 (2017)","DOI":"10.14722\/ndss.2017.23091"},{"key":"1_CR26","series-title":"Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","doi-asserted-by":"publisher","first-page":"469","DOI":"10.1007\/978-3-319-78813-5_24","volume-title":"Security and Privacy in Communication Networks","author":"Q Ye","year":"2018","unstructured":"Ye, Q., Bai, G., Dong, N., Dong, J.S.: Inferring implicit assumptions and\u00a0correct usage of mobile payment protocols. In: Lin, X., Ghorbani, A., Ren, K., Zhu, S., Zhang, A. (eds.) SecureComm 2017. LNICST, vol. 238, pp. 469\u2013488. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-78813-5_24"}],"container-title":["Lecture Notes in Computer Science","Applied Cryptography and Network Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-78375-4_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T00:06:13Z","timestamp":1780963573000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-78375-4_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030783747","9783030783754"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-78375-4_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"10 June 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ACNS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Applied Cryptography and Network Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Kamakura","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Japan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 June 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 June 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"acns2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"186","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"37","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"20% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.89","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7.81","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Due to the COVID-19 pandemic the conference took place virtually.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}