{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T09:10:18Z","timestamp":1790673018270,"version":"4.1.0"},"reference-count":31,"publisher":"Springer Science and Business Media LLC","issue":"10","license":[{"start":{"date-parts":[[2014,2,14]],"date-time":"2014-02-14T00:00:00Z","timestamp":1392336000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Multimed Tools Appl"],"published-print":{"date-parts":[[2015,5]]},"DOI":"10.1007\/s11042-014-1888-3","type":"journal-article","created":{"date-parts":[[2014,2,13]],"date-time":"2014-02-13T06:41:51Z","timestamp":1392273711000},"page":"3289-3303","source":"Crossref","is-referenced-by-count":21,"title":["Case study of the vulnerability of OTP implemented in internet banking systems of South Korea"],"prefix":"10.1007","volume":"74","author":[{"given":"Changsok","family":"Yoo","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Byung-Tak","family":"Kang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Huy Kang","family":"Kim","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2014,2,14]]},"reference":[{"key":"1888_CR1","unstructured":"(2008) NetworkWorld, New Trojan intercepts online banking information, http:\/\/www.networkworld.com\/news\/2008\/011408-silentbanker-trojan.html"},{"key":"1888_CR2","unstructured":"(2014) Gi Seong Lee, Huy Kang Kim, \u201cInternet Banking Security Services in South Korea, the status quo\u201d, http:\/\/www.hksecurity.net\/internet-banking-in-south-korea"},{"key":"1888_CR3","doi-asserted-by":"crossref","unstructured":"Aloul F, Zahidi S, Wassim E-H (2009) Two factor authentication using mobile phones. IEEE\/ACS International Conference on Computer Systems and Applications, pp 641\u2013644","DOI":"10.1109\/AICCSA.2009.5069395"},{"key":"1888_CR4","unstructured":"Bae G, Lim G (2008) Analysis of basic weakness of keyboard security solution, Korea Institute of Information Security Cryptology, No.3, Vol. 18, pp 89\u201395"},{"key":"1888_CR5","unstructured":"BBC News, South Korea blames North for bank and TV cyber-attacks, http:\/\/www.bbc.co.uk\/news\/technology-22092051"},{"issue":"2","key":"1888_CR6","doi-asserted-by":"crossref","first-page":"228","DOI":"10.1007\/s11227-010-0412-4","volume":"55","author":"H Chang","year":"2011","unstructured":"Chang H (2011) The study on end-to-end security for ubiquitous commerce. J Supercomput 55(2):228\u2013245","journal-title":"J Supercomput"},{"key":"1888_CR7","first-page":"1","volume":"3","author":"K Christos","year":"2007","unstructured":"Christos K (2007) Dimitriadis, analyzing the security of internet banking authentication mechanisms. Inf Syst Control J 3:1\u20138","journal-title":"Inf Syst Control J"},{"key":"1888_CR8","unstructured":"Citibank Phish Spoofs 2-Factor Authentication, http:\/\/blog.washingtonpost.com\/securityfix\/2006\/07\/citibank_phish_spoofs_2factor_1.html"},{"key":"1888_CR9","unstructured":"Considerations for web transaction security, RFC2084, http:\/\/www.ietf.org\/rfc\/rfc2084.txt"},{"key":"1888_CR10","unstructured":"Cornel de Jong, Online authentication methods, evaluate the strength of online authentication methods, http:\/\/staff.science.uva.nl\/~delaat\/rp\/2007-2008\/p30\/report.pdf"},{"key":"1888_CR11","unstructured":"Guhring P (2007) Concepts against man-in-the-browser attacks"},{"key":"1888_CR12","doi-asserted-by":"crossref","unstructured":"Hallsteinsen S, Jorstad I, Thanh D (2007) Using the mobile phone as s security token for unified authentication. In: ICSNC 2007. IEEE Computer Society, Los Alamitos pp 68","DOI":"10.1109\/ICSNC.2007.82"},{"key":"1888_CR13","unstructured":"Hanacek P, Malinka K, Schafer J (2009) E-Banking Security\u2014Comparative Study, 10th ACIS, pp 263\u201326"},{"key":"1888_CR14","doi-asserted-by":"crossref","unstructured":"Hiltgen A, Kramp T, Weigold T (2006) Secure Internet Banking Authentication, IEEE Security & Privacy","DOI":"10.1109\/MSP.2006.50"},{"issue":"8","key":"1888_CR15","first-page":"2374","volume":"E87-B","author":"WC Ku","year":"2005","unstructured":"Ku WC, Tasi HC, Tsaur MJ (2005) Stolen-verifier attack on an efficient smartcard-based one-time password authentication scheme. IEICE Trans Commun E87-B(8):2374\u20132376","journal-title":"IEICE Trans Commun"},{"key":"1888_CR16","unstructured":"Maeng Y, Shin D, Kim S, Yang D, Lee M (2010) Analysis of weakness of MITB against credit transfer of domestic internet banking, Internet and Information Security, No.2, Vol.1, pp 101\u2013118"},{"key":"1888_CR17","doi-asserted-by":"crossref","unstructured":"Mizuno S, Yamada K, Takahashi K (2005) Authentication using multiple communication channels, in DIM 2005: Proceedings of the 2005 workshop on Digital identity management. New York, NY, USA: ACM, pp 54\u201362","DOI":"10.1145\/1102486.1102496"},{"key":"1888_CR18","doi-asserted-by":"crossref","unstructured":"Oppliger R, Rytz R, Holderegger T (2009) eSecurity Technol, Internet Banking: Client-Side Attacks and Protection Mechanisms, IEEE, Computer, pp 27\u201333","DOI":"10.1109\/MC.2009.194"},{"key":"1888_CR19","doi-asserted-by":"crossref","unstructured":"Paulson LD (2002) Key snooping technology causes controversy, IEEE, Computer, pp 27","DOI":"10.1109\/MC.2002.989923"},{"key":"1888_CR20","unstructured":"Phishing attack targets one-time passwords\u2014scratch it and weep, http:\/\/www.theregister.co.uk\/2005\/10\/12\/outlaw_phishing\/"},{"key":"1888_CR21","unstructured":"Phone approval service, http:\/\/bank1.kbstar.com\/quics?asfilecode=5023&_nextPage=page=B002346"},{"key":"1888_CR22","unstructured":"Security aspects of the SuisseID - http:\/\/postsuisseid.ch\/en\/suisseid\/security\/security-aspects"},{"key":"1888_CR23","unstructured":"Seo S, Kang W, (2007) Technical status of OTP & cases of introducing OTP in domestic financial institutions, Korea Institute of Information Security Cryptology, No.3, Vol. 17, pp 18\u201325"},{"key":"1888_CR24","unstructured":"Sherstobitoff R, Liba I, Walter J (2013) Dissecting Operation Troy: Cyberespionage in South Korea, http:\/\/www.mcafee.com\/au\/resources\/white-papers\/wp-dissecting-operation-troy.pdf"},{"key":"1888_CR25","unstructured":"Steeves DJ, Snyder MW (2005) Secure online transaction using a CAPTCHA image as a watermark, U.S.Patent, 11\/157,336"},{"key":"1888_CR26","doi-asserted-by":"crossref","unstructured":"Thanh D, Jonvik T, Feng B, Thuan D, Jorstad I (2008) Simple strong authentication for internet applications using mobile phones. IEEE GLOBECOM pp 1\u20135","DOI":"10.1109\/GLOCOM.2008.ECP.319"},{"key":"1888_CR27","unstructured":"UOTP, http:\/\/www.u-otp.co.kr\/blog\/"},{"key":"1888_CR28","unstructured":"Wikipedia.: Man-in-the-middle Attack, http:\/\/en.wikipedia.org\/wiki\/Man_in_the_middle_attack"},{"key":"1888_CR29","unstructured":"Wikipedia.: One-Time Password, http:\/\/en.wikipedia.org\/wiki\/One-time_password"},{"key":"1888_CR30","unstructured":"Wikipedia.: Online Banking, http:\/\/en.wikipedia.org\/wiki\/Online_banking"},{"key":"1888_CR31","unstructured":"Wikipedia.: Two-factor Authentication, http:\/\/en.wikipidia.org\/wiki\/two-factor_authentication"}],"container-title":["Multimedia Tools and Applications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-014-1888-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11042-014-1888-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-014-1888-3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,7]],"date-time":"2019-08-07T15:55:50Z","timestamp":1565193350000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11042-014-1888-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,2,14]]},"references-count":31,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2015,5]]}},"alternative-id":["1888"],"URL":"https:\/\/doi.org\/10.1007\/s11042-014-1888-3","relation":{},"ISSN":["1380-7501","1573-7721"],"issn-type":[{"value":"1380-7501","type":"print"},{"value":"1573-7721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,2,14]]}}}