{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,17]],"date-time":"2025-10-17T14:00:39Z","timestamp":1760709639830,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,6,20]],"date-time":"2018-06-20T00:00:00Z","timestamp":1529452800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,6,20]]},"DOI":"10.1145\/3209811.3209817","type":"proceedings-article","created":{"date-parts":[[2018,6,20]],"date-time":"2018-06-20T12:12:39Z","timestamp":1529496759000},"page":"1-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["ThinSIM-based Attacks on Mobile Money Systems"],"prefix":"10.1145","author":[{"given":"Rowan","family":"Phipps","sequence":"first","affiliation":[{"name":"University of Washington, ICTD Lab"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shrirang","family":"Mare","sequence":"additional","affiliation":[{"name":"University of Washington, ICTD Lab & Security and Privacy Lab"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peter","family":"Ney","sequence":"additional","affiliation":[{"name":"University of Washington, Security and Privacy Lab"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jennifer","family":"Webster","sequence":"additional","affiliation":[{"name":"University of Washington, ICTD Lab"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kurtis","family":"Heimerl","sequence":"additional","affiliation":[{"name":"University of Washington, ICTD Lab"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,6,20]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2017. Africa's Talking USSD pricing. https:\/\/www.africastalking.com\/services\/ussd\/pricing  2017. Africa's Talking USSD pricing. https:\/\/www.africastalking.com\/services\/ussd\/pricing"},{"key":"e_1_3_2_1_2_1","unstructured":"2017. Osmocom Project. https:\/\/osmocom.org\/  2017. Osmocom Project. https:\/\/osmocom.org\/"},{"key":"e_1_3_2_1_3_1","unstructured":"2017. USSD Airflow. https:\/\/github.com\/mwaaas\/ussd_airflow  2017. USSD Airflow. https:\/\/github.com\/mwaaas\/ussd_airflow"},{"key":"e_1_3_2_1_4_1","volume-title":"ETSI TS 101 267 Specification of the SIM Application Toolkit for the Subscriber Identity Module - Mobile Equipment (SIM-ME) interface (3GPP TS 11.14 version 8.10.0 Release","author":"GPP.","year":"1999","unstructured":"3 GPP. 1999. ETSI TS 101 267 Specification of the SIM Application Toolkit for the Subscriber Identity Module - Mobile Equipment (SIM-ME) interface (3GPP TS 11.14 version 8.10.0 Release 1999 ). http:\/\/www.etsi.org\/deliver\/etsi_ts\/101200_101299\/101267\/08.18.00_60\/ts_101267v081800p.pdf 3GPP. 1999. ETSI TS 101 267 Specification of the SIM Application Toolkit for the Subscriber Identity Module - Mobile Equipment (SIM-ME) interface (3GPP TS 11.14 version 8.10.0 Release 1999). http:\/\/www.etsi.org\/deliver\/etsi_ts\/101200_101299\/101267\/08.18.00_60\/ts_101267v081800p.pdf"},{"key":"e_1_3_2_1_5_1","unstructured":"3GPP. 2007. GSM 02.90 (ETSI TS 100 625 V7.0.0) Specification (USSD) -- Stage 1. https:\/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx?specificationId=96  3GPP. 2007. GSM 02.90 (ETSI TS 100 625 V7.0.0) Specification (USSD) -- Stage 1. https:\/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx?specificationId=96"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987470"},{"key":"e_1_3_2_1_7_1","volume-title":"Pakistan emerges as top market for smartphones. Daily Times (26","author":"Ahmed Khurshid","year":"2017","unstructured":"Khurshid Ahmed . 2017. Pakistan emerges as top market for smartphones. Daily Times (26 September 2017 ), 745--770. https:\/\/dailytimes.com.pk\/115257\/pakistan-emerges-as-top-market-for-smartphones\/ Khurshid Ahmed. 2017. Pakistan emerges as top market for smartphones. Daily Times (26 September 2017), 745--770. https:\/\/dailytimes.com.pk\/115257\/pakistan-emerges-as-top-market-for-smartphones\/"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1999927.1999939"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1999927.1999940"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2737856.2738031"},{"key":"e_1_3_2_1_11_1","unstructured":"Ravi Borgaonkar. 2013. Dirty use of USSD codes in cellular networks.  Ravi Borgaonkar. 2013. Dirty use of USSD codes in cellular networks."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11292-014-9222-7"},{"key":"e_1_3_2_1_13_1","unstructured":"Michael Calore. 2017. Worried the CIA Hacked Your Samsung TV? Here's How to Tell. https:\/\/www.wired.com\/2017\/03\/worried-cia-hacked-samsung-tv-heres-tell\/  Michael Calore. 2017. Worried the CIA Hacked Your Samsung TV? Here's How to Tell. https:\/\/www.wired.com\/2017\/03\/worried-cia-hacked-samsung-tv-heres-tell\/"},{"key":"e_1_3_2_1_14_1","unstructured":"Chris Donkin. 2017. M-Pesa continues to dominate Kenyan market. https:\/\/www.mobileworldlive.com\/money\/analysis-money\/m-pesa-continues-to-dominate-kenyan-market\/.  Chris Donkin. 2017. M-Pesa continues to dominate Kenyan market. https:\/\/www.mobileworldlive.com\/money\/analysis-money\/m-pesa-continues-to-dominate-kenyan-market\/."},{"key":"e_1_3_2_1_15_1","unstructured":"Hannah Francis and Ben Grubb. 2015. Telcos face mass SIM card recall after spy agencies' encryption hack revealed. http:\/\/www.smh.com.au\/digital-life\/consumer-security\/telcos-face-mass-sim-card-recall-after-spy-agencies-encryption-hack-revealed-20150223-13mecc.html.  Hannah Francis and Ben Grubb. 2015. Telcos face mass SIM card recall after spy agencies' encryption hack revealed. http:\/\/www.smh.com.au\/digital-life\/consumer-security\/telcos-face-mass-sim-card-recall-after-spy-agencies-encryption-hack-revealed-20150223-13mecc.html."},{"key":"e_1_3_2_1_16_1","volume-title":"SIM toolkit in practice. Bachelor Thesis","author":"Gielen Sjors","year":"2012","unstructured":"Sjors Gielen and Fabian van den Broek . 2012. SIM toolkit in practice. Bachelor Thesis , Radboud University in Nijmegen, The Netherlands ( 2012 ). Sjors Gielen and Fabian van den Broek. 2012. SIM toolkit in practice. Bachelor Thesis, Radboud University in Nijmegen, The Netherlands (2012)."},{"key":"e_1_3_2_1_17_1","unstructured":"GSMA. 2014. Generic overlay SIM security assessment.  GSMA. 2014. Generic overlay SIM security assessment."},{"volume-title":"Telecommunications Forum Telfor (TELFOR)","author":"Had\u017eiali\u0107 Mesud","key":"e_1_3_2_1_18_1","unstructured":"Mesud Had\u017eiali\u0107 , Mirko \u0160krbi\u0107 , Kemal Huseinovi\u0107 , Irvin Ko\u010dan , Jasmin Mu\u0161ovi\u0107 , Alisa Hebibovi\u0107 , and Lamija Kasumagi\u0107 . 2014. An approach to analyze security of GSM network . In Telecommunications Forum Telfor (TELFOR) . IEEE , 99--102. Mesud Had\u017eiali\u0107, Mirko \u0160krbi\u0107, Kemal Huseinovi\u0107, Irvin Ko\u010dan, Jasmin Mu\u0161ovi\u0107, Alisa Hebibovi\u0107, and Lamija Kasumagi\u0107. 2014. An approach to analyze security of GSM network. In Telecommunications Forum Telfor (TELFOR). IEEE, 99--102."},{"key":"e_1_3_2_1_19_1","unstructured":"Tim Harford. 2017. Money via mobile: The M-Pesa revolution. http:\/\/www.bbc.com\/news\/business-38667475.  Tim Harford. 2017. Money via mobile: The M-Pesa revolution. http:\/\/www.bbc.com\/news\/business-38667475."},{"key":"e_1_3_2_1_20_1","first-page":"1","article-title":"M-Pesa: mobile money for the 'unbanked' turning cellphones into 24-hour tellers in Kenya","volume":"2","author":"Hughes Nick","year":"2007","unstructured":"Nick Hughes and Susie Lonie . 2007 . M-Pesa: mobile money for the 'unbanked' turning cellphones into 24-hour tellers in Kenya . Innovations 2 , 1 -- 2 (2007), 63--81. Nick Hughes and Susie Lonie. 2007. M-Pesa: mobile money for the 'unbanked' turning cellphones into 24-hour tellers in Kenya. Innovations 2, 1--2 (2007), 63--81.","journal-title":"Innovations"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3136560.3136571"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2145204.2145224"},{"key":"e_1_3_2_1_24_1","unstructured":"Maureen Kakah. 2015. Equity gets court backing to rollout thin SIM technology. http:\/\/www.nation.co.ke\/business\/Equity-gets-court-backing-to-roll-out-thin-SIM-technology\/996-2733930-kccoy4\/index.html  Maureen Kakah. 2015. Equity gets court backing to rollout thin SIM technology. http:\/\/www.nation.co.ke\/business\/Equity-gets-court-backing-to-roll-out-thin-SIM-technology\/996-2733930-kccoy4\/index.html"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/PDP.2011.62"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1979150"},{"key":"e_1_3_2_1_27_1","unstructured":"ALICE NUNGARI KUNG\u00e2\u0102ŹU. 2015. Competitive strategies adopted by Equity bank Kenya limited to cope with technological changes. (2015).  ALICE NUNGARI KUNG\u00e2\u0102ŹU. 2015. Competitive strategies adopted by Equity bank Kenya limited to cope with technological changes. (2015)."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2369220.2369242"},{"key":"e_1_3_2_1_29_1","unstructured":"Doreen Nyaketcho Dale Lindskog and Ron Ruhl. 2017. STK implementation in SMS banking in M-pesa-Kenya exploits and feasible solutions.  Doreen Nyaketcho Dale Lindskog and Ron Ruhl. 2017. STK implementation in SMS banking in M-pesa-Kenya exploits and feasible solutions."},{"key":"e_1_3_2_1_30_1","unstructured":"Elly Okutoyi. 2014. Safaricom launches M-Pesa health insurance. http:\/\/www.itwebafrica.com\/mobile\/309-kenya\/232296-safaricom-launches-m-pesa-health-insurance  Elly Okutoyi. 2014. Safaricom launches M-Pesa health insurance. http:\/\/www.itwebafrica.com\/mobile\/309-kenya\/232296-safaricom-launches-m-pesa-health-insurance"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10606-017-9289-6"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029533.1029577"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1734583.1734597"},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of the USENIX Symposium on Security. 17--32","author":"Reaves Bradley","year":"2015","unstructured":"Bradley Reaves , Nolen Scaife , Adam M Bates , Patrick Traynor , and Kevin RB Butler . 2015 . Mo(bile) money, mo(bile) problems: Analysis of branchless banking applications in the developing world . In Proceedings of the USENIX Symposium on Security. 17--32 . Bradley Reaves, Nolen Scaife, Adam M Bates, Patrick Traynor, and Kevin RB Butler. 2015. Mo(bile) money, mo(bile) problems: Analysis of branchless banking applications in the developing world. In Proceedings of the USENIX Symposium on Security. 17--32."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.40"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3136560.3136569"},{"key":"e_1_3_2_1_37_1","volume-title":"Proceeings of the USENIX Workshop on Offensive Technologies (WOOT). USENIX Association.","author":"Shwartz Omer","year":"2017","unstructured":"Omer Shwartz , Amir Cohen , Asaf Shabtai , and Yossi Oren . 2017 . Shattered trust: When replacement smartphone components attack . In Proceeings of the USENIX Workshop on Offensive Technologies (WOOT). USENIX Association. Omer Shwartz, Amir Cohen, Asaf Shabtai, and Yossi Oren. 2017. Shattered trust: When replacement smartphone components attack. In Proceeings of the USENIX Workshop on Offensive Technologies (WOOT). USENIX Association."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1753326.1753436"},{"volume-title":"Smart cards, tokens, security and applications","author":"Tunstall Michael","key":"e_1_3_2_1_39_1","unstructured":"Michael Tunstall . 2017. Smart card security . In Smart cards, tokens, security and applications . Springer , 217--251. Michael Tunstall. 2017. Smart card security. In Smart cards, tokens, security and applications. Springer, 217--251."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3209811.3209818"},{"key":"e_1_3_2_1_41_1","unstructured":"Charles Wokabi. 2015. M-Pesa customers to receive up to Sh1m loan through phones. http:\/\/www.nation.co.ke\/business\/MPesa-customers-to-receive-up-to-Sh1m-loan-through-phones\/996-2649138-124yed4\/index.html  Charles Wokabi. 2015. M-Pesa customers to receive up to Sh1m loan through phones. http:\/\/www.nation.co.ke\/business\/MPesa-customers-to-receive-up-to-Sh1m-loan-through-phones\/996-2649138-124yed4\/index.html"},{"key":"e_1_3_2_1_42_1","volume-title":"Fraud vulnerabilities in Sitekey security at bank of America. Available: www.cr-labs.com\/publications\/SiteKey-20060718.pdf","author":"Youll Jim","year":"2006","unstructured":"Jim Youll . 2006. Fraud vulnerabilities in Sitekey security at bank of America. Available: www.cr-labs.com\/publications\/SiteKey-20060718.pdf ( 2006 ). Jim Youll. 2006. Fraud vulnerabilities in Sitekey security at bank of America. Available: www.cr-labs.com\/publications\/SiteKey-20060718.pdf (2006)."}],"event":{"name":"COMPASS '18: ACM SIGCAS Conference on Computing and Sustainable Societies","sponsor":["SIGCAS ACM Special Interest Group on Computers and Society"],"location":"Menlo Park and San Jose CA USA","acronym":"COMPASS '18"},"container-title":["Proceedings of the 1st ACM SIGCAS Conference on Computing and Sustainable Societies"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3209811.3209817","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3209811.3209817","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:13:08Z","timestamp":1750212788000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3209811.3209817"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,6,20]]},"references-count":41,"alternative-id":["10.1145\/3209811.3209817","10.1145\/3209811"],"URL":"https:\/\/doi.org\/10.1145\/3209811.3209817","relation":{},"subject":[],"published":{"date-parts":[[2018,6,20]]},"assertion":[{"value":"2018-06-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}