{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T21:02:07Z","timestamp":1763154127187,"version":"3.45.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000781","name":"European Research Council","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000781","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Grant ResolutioNet","award":["ERC-StG-679158"],"award-info":[{"award-number":["ERC-StG-679158"]}]},{"name":"European Commission through the Horizon Europe Programme"},{"name":"Project SafeHorizon","award":["101168562"],"award-info":[{"award-number":["101168562"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,11]]},"DOI":"10.1109\/tdsc.2025.3594630","type":"journal-article","created":{"date-parts":[[2025,8,6]],"date-time":"2025-08-06T18:02:35Z","timestamp":1754503355000},"page":"7302-7318","source":"Crossref","is-referenced-by-count":0,"title":["Your PIN is Mine: Uncovering Users\u2019 PINs at Point of Sale Machines"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9535-1425","authenticated-orcid":false,"given":"Stefano","family":"Cecconello","sequence":"first","affiliation":[{"name":"University of Padua, Padova, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1482-3513","authenticated-orcid":false,"given":"Matteo","family":"Cardaioli","sequence":"additional","affiliation":[{"name":"GFT Italy, Padova, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3023-3046","authenticated-orcid":false,"given":"Luca","family":"Pasa","sequence":"additional","affiliation":[{"name":"University of Padua, Padova, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7509-4337","authenticated-orcid":false,"given":"Stjepan","family":"Picek","sequence":"additional","affiliation":[{"name":"Faculty of Science, Radboud University, Nijmegen, XZ, The Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4127-3617","authenticated-orcid":false,"given":"Georgios","family":"Smaragdakis","sequence":"additional","affiliation":[{"name":"Delft University of Technology, Delft, CD, The Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0276203"},{"year":"2022","key":"ref2","article-title":"Study on the payment attitudes of consumers in the euro area (SPACE) \u20132022"},{"journal-title":"","article-title":"Global Payments Report 2023","year":"2023","key":"ref3"},{"key":"ref4","article-title":"Cloning credit cards: A combined pre-play and downgrade attack on EMV contactless","volume-title":"Proc. USENIX WOOT","author":"Roland","year":"2013"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s11948-018-0049-x"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00037"},{"key":"ref7","article-title":"Inducing authentication failures to bypass credit card PINs","volume-title":"Proc. USENIX Secur.","author":"Basin","year":"2023"},{"year":"2023","key":"ref8","article-title":"Tap-to-pay, insert-to-rob: Cybercriminals can now block contactless payments"},{"key":"ref9","first-page":"1687","article-title":"Hand me your PIN! Inferring ATM PINs of users typing with a covered hand","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Cardaioli","year":"2022"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660360"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23130"},{"key":"ref12","article-title":"Human-robot interaction with depth-based gesture recognition","volume-title":"Proc. IAS-13 Workshop","author":"Pozzato","year":"2014"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MMSP.2009.5293284"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICNNSP.2008.4590300"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2015.7301342"},{"key":"ref16","article-title":"Static hand gesture recognition based on convolutional neural networks","author":"Agaian","year":"2019","journal-title":"J. Elect. Comput. Eng."},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.3390\/s19245429"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-68697-5_9"},{"article-title":"Cache-timing attacks on AES","year":"2005","author":"Bernstein","key":"ref19"},{"key":"ref20","first-page":"388","article-title":"Differential power analysis","volume-title":"Proc. 19th Annu. Int. Cryptology Conf. Adv. Cryptology","author":"Kocher","year":"1999"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45418-7_17"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-015-9224-2"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08302-5_15"},{"key":"ref24","article-title":"Timing analysis of keystrokes and timing attacks on SSH","volume-title":"Proc. USENIX Secur. Symp.","volume":"2001","author":"Song"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-191289"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.09.003"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.28"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23060"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00059"},{"key":"ref30","first-page":"6","article-title":"Heat of the moment: Characterizing the efficacy of thermal camera-based attacks","volume-title":"Proc. 5th USENIX Conf. Offensive Technol.","author":"Mowery","year":"2011"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329846"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053005"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_35"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484549"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623088"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179322"},{"year":"2023","key":"ref37","article-title":"Largest manufacturers of POS terminals worldwide from 2009 to 2021, ased on unit shipments"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2015.7299101"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1995.7.1.108"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053031"},{"article-title":"SecLists: Four-digit PIN codes sorted by frequency with count","year":"2025","author":"Miessler","key":"ref41"},{"year":"2025","key":"ref42","article-title":"SecLists package: Four-digit PIN codes sorted by frequency with count"},{"key":"ref43","first-page":"5555","article-title":"PointerGuess: Targeted password guessing model using pointer mechanism","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"Xiu","year":"2024"},{"key":"ref44","first-page":"175","article-title":"Fast, lean, and accurate: Modeling password guessability using neural networks","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Melicher","year":"2016"},{"key":"ref45","first-page":"965","article-title":"Password guessing using random forest","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Wang","year":"2023"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978339"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025461"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11242243\/11119217.pdf?arnumber=11119217","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T21:01:00Z","timestamp":1763154060000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11119217\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11]]},"references-count":47,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3594630","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"type":"print","value":"1545-5971"},{"type":"electronic","value":"1941-0018"},{"type":"electronic","value":"2160-9209"}],"subject":[],"published":{"date-parts":[[2025,11]]}}}