arrow
Return

Usable security for QR code

delete2019-10-01
delete38
delete
OA
AI
R
Riccardo Focardi
F
Flaminia L. Luccio *
H
Heider A. Wahsheh
DOI:10.1016/j.jisa.2019.102369delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
QR codes are widely used in various settings such as consumer advertising, commercial tracking, ticketing and marketing. People tend to scan QR codes and trust their content, but there exists no standard mechanism for providing authenticity and confidentiality of the code content. Attacks such as the redirection to a malicious website or the infection of a smartphone with a malware are realistic and feasible in practice. In this paper, we present the first systematic study of usable state-of-the-art cryptographic primitives inside QR codes. We select standard, popular cryptographic schemes and we compare them based on performance, size and security. We conduct tests that show how different usability factors impact on the QR code scanning performance and we evaluate the usability/security trade-off-of the considered cryptographic schemes. Interestingly, we find out that in some cases security breaks usability and we provide recommendations for the choice of secure and usable cryptographic schemes. (C) 2019 Elsevier Ltd. All rights reserved.
Keywords:
QR Codes
Usable security
Cryptography
Digital signature
HMAC
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

Journal of Information Security and Applications cover
Journal of Information Security and Applications
IF:
3.7
Papers:
1.9K
Citations:
4.9K

Organization

U
Universita Ca Foscari Venezia
Scholars:
3.4K
Papers: 3.2K
Citations: 6