The week's pick
Random Articles
Reseach Article
QR Code Security: Mitigating the Issue of Quishing (QR Code Phishing)
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 184 - Number 33 |
| Year of Publication: 2022 |
| Authors: Godwin Awuah Amoah, Hayfron-Acquah J.B. |
10.5120/ijca2022922425
|
Godwin Awuah Amoah, Hayfron-Acquah J.B. . QR Code Security: Mitigating the Issue of Quishing (QR Code Phishing). International Journal of Computer Applications. 184, 33 ( Oct 2022), 34-39. DOI=10.5120/ijca2022922425
Abstract
To accommodate new technologies and communication methods, cybersecurity must advance. For security experts, especially those working in fields like digital forensics, new technologies provide both opportunities and challenges. New technologies like smartphones and new ways of disseminating information, like social media, might provide difficulties. Use of QR (Quick Response) codes is one of the rapidly expanding interface technologies. This paper explores privacy issues that might arise with QR codes and other information security-harming technologies. Additionally, it emphasizes the necessity for experts in the field to solve security concerns raised by the increasing use of QR codes. Each URL's words were extracted using a count vectorizer, and the URLs that were part of the QR code were used to obtain features. To distinguish between legitimate and phishing URLs, traits and words were tokenized, and naive Bayesian machine learning classification techniques were used in a recursive loop alongside logistic regression. A very accurate model was created, aiding in the reduction of quishing behaviour.
References
- “Aalto University”. [Online]. Available: https://research.aalto.fi/portal/en/. [ Accessed 20 04 2022].
- Chuang, J.C., Hu, Y.C., Ko, H.J. (2010). A Novel Secret Sharing Technique Using QRCode. International Journal of Image Processing (IJIP) 4(5) 468-475
- Gao, J., Kulkarni, V., Ranavat, H., Chang, L., Mei, H. (2009). A 2D Barcode-Based Mobile Payment System. In: Multimedia and Ubiquitous Engineering, 2009. MUE’09. Third International Conference on, IEEE 320-329
- ISO/IEC 18004:2000. (2000).Ínformation technology-Automatic identification and data capture techniques – Bar Code symbology-QR Code “.
- Kharraz, A., Kirda, E., Robertson, W., Balzarotti, D., &Francillon, A. A. (2014). Optical delusions: A study ofmalicious QR codes in the wild. Proceedings - 44th AnnualIEEE/IFIP International Conference on DependableSystems and Networks, DSN 2014, (December), 192–203.https://doi.org/10.1109/DSN.2014.103
- Krombholz, K., Fr¨uhwirt, P., Kieseberg, P., Kapsalis, I., Huber, M., Weippl, E. (2014). QR Code Security: A Survey of Attacks and Challenges for Usable Security. In: International Conference on Human Aspects of Information Security, Privacy, and Trust, Springer 79-90
- Narayanan, A.S. (2012). QR Codes and Security Solutions. International Journal of Computer Science and Telecommunications 3(7) 69-71
- Peng, K., Sanabria, H., Wu, D., Zhu, C. (2014). Security Overview of QR Codes. Student project in the MIT course 6.857,’14
- T. Ishihara and M. Niimi, "Compatible 2D-Code HavingTamper Detection System with QR-Code," (2014). TenthInternational Conference on Intelligent Information Hiding andMultimedia Signal Processing, Kitakyushu, 2014, pp. 493-496.DOI: 10.1109/IIH-MSP.2014.129
- Yao, H., & Shin, D. (2013). Towards preventing QR code-based attacks on android phones using security warnings.Proceedings of the 8th ACM SIGSAC Symposium onInformation, Computer, and Communications Security -ASIA CCS ’13, 341.https://doi.org/10.1145/2484313.2484357
- Banu, M. N., & Banu, S. M. (2013). A Comprehensive Study of Phishing Attacks. International Journal of ComputerScience and Information Technologies, 4(6), 783 786.Retrievedfromhttp://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.643.766&rep=rep1&type=pdf
- Tao, L. (2017). QR code scams rise in China, putting epayment security in spotlight | South China Morning Post. South China Morning Post. Retrieved from http://www.scmp.com/business/china business/article/2080841/rise-qr-code-scams-china-putsOnline-payment-security.
- Shaikh, A. N., Shabut, A. M., & Hossain, M. A. (2017). Aliterature review on phishing crime, prevention review andinvestigation of gaps. SKIMA 2016 - 2016 10th International Conference on Software, Knowledge, Information Management and Application.
Index Terms
Keywords