{"id":"https://openalex.org/W2000600322","doi":"https://doi.org/10.1145/1920261.1920288","title":"Breaking e-banking CAPTCHAs","display_name":"Breaking e-banking CAPTCHAs","publication_year":2010,"publication_date":"2010-12-06","ids":{"openalex":"https://openalex.org/W2000600322","doi":"https://doi.org/10.1145/1920261.1920288","mag":"2000600322"},"language":"en","primary_location":{"id":"doi:10.1145/1920261.1920288","doi":"https://doi.org/10.1145/1920261.1920288","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1920261.1920288","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://kops.uni-konstanz.de/server/api/core/bitstreams/8645fb7e-eafd-461d-a6c7-67f7866073d9/content","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100745576","display_name":"Shujun Li","orcid":"https://orcid.org/0000-0001-5628-7328","observed_orcids":["https://orcid.org/0000-0001-5628-7328"]},"institutions":[{"id":"https://openalex.org/I189712700","display_name":"University of Konstanz","ror":"https://ror.org/0546hnb39","country_code":"DE","type":"education","lineage":["https://openalex.org/I189712700"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Shujun Li","raw_affiliation_strings":["University of Konstanz, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Konstanz, Germany","institution_ids":["https://openalex.org/I189712700"]}]},{"author_position":"middle","author":{"id":null,"display_name":"S. Amier Haider Shah","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"S. Amier Haider Shah","raw_affiliation_strings":["National University of Science and Technology, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Science and Technology, Pakistan","institution_ids":["https://openalex.org/I929597975"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077652615","display_name":"Mudassir Khan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"M. Asad Usman Khan","raw_affiliation_strings":["National University of Science and Technology, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Science and Technology, Pakistan","institution_ids":["https://openalex.org/I929597975"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110173633","display_name":"Syed Ali Khayam","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Syed Ali Khayam","raw_affiliation_strings":["National University of Science and Technology, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Science and Technology, Pakistan","institution_ids":["https://openalex.org/I929597975"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079497016","display_name":"Ahmad\u2010Reza Sadeghi","orcid":"https://orcid.org/0000-0001-6833-3598","observed_orcids":["https://orcid.org/0000-0001-6833-3598"]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ahmad-Reza Sadeghi","raw_affiliation_strings":["Ruhr-University of Bochum, Germany","Ruhr-University of Bochum, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr-University of Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]},{"raw_affiliation_string":"Ruhr-University of Bochum, Germany#TAB#","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016077051","display_name":"Roland Schmitz","orcid":"https://orcid.org/0000-0003-3848-5288","observed_orcids":["https://orcid.org/0000-0003-3848-5288"]},"institutions":[{"id":"https://openalex.org/I1283220839","display_name":"Stuttgart Media University","ror":"https://ror.org/022r03w28","country_code":"DE","type":"education","lineage":["https://openalex.org/I1283220839"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Roland Schmitz","raw_affiliation_strings":["Stuttgart Media University, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stuttgart Media University, Germany","institution_ids":["https://openalex.org/I1283220839"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1623,"has_fulltext":true,"cited_by_count":55,"citation_normalized_percentile":{"value":0.93160523,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":87,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"171","last_page":"180"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/captcha-cracking","display_name":"CAPTCHA cracking","score":0.7440000176429749},{"id":"https://openalex.org/keywords/online-banking-security","display_name":"online banking security","score":0.9480000138282776},{"id":"https://openalex.org/keywords/man-in-the-middle-attacks","display_name":"man-in-the-middle attacks","score":0.9210000038146973},{"id":"https://openalex.org/keywords/automated-attacks","display_name":"automated attacks","score":0.5450000166893005},{"id":"https://openalex.org/keywords/image-processing","display_name":"image processing","score":0.7730000019073486},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"pattern recognition","score":0.9580000042915344},{"id":"https://openalex.org/keywords/financial-institutions","display_name":"financial institutions","score":0.5600000023841858}],"concepts":[{"id":"https://openalex.org/C163339463","wikidata":"https://www.wikidata.org/wiki/Q484598","display_name":"CAPTCHA","level":2,"score":0.8368392586708069},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5443857908248901},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.32775425910949707},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26841992139816284}],"mesh":[],"locations_count":7,"locations":[{"id":"doi:10.1145/1920261.1920288","doi":"https://doi.org/10.1145/1920261.1920288","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1920261.1920288","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:epubs.surrey.ac.uk:532434","doi":null,"is_oa":false,"landing_page_url":"http://epubs.surrey.ac.uk/532434/1/ACSAC2010.pdf","pdf_url":"http://epubs.surrey.ac.uk/532434/1/ACSAC2010.pdf","source":{"id":"https://openalex.org/S4306400680","display_name":"Surrey Research Insight Open Access (The University of Surrey)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I28290843","host_organization_name":"University of Surrey","host_organization_lineage":["https://openalex.org/I28290843"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},{"id":"pmh:oai:kops.uni-konstanz.de:123456789/6246","doi":null,"is_oa":true,"landing_page_url":"http://nbn-resolving.de/urn:nbn:de:bsz:352-opus-127806","pdf_url":"https://kops.uni-konstanz.de/server/api/core/bitstreams/8645fb7e-eafd-461d-a6c7-67f7866073d9/content","source":{"id":"https://openalex.org/S4306401487","display_name":"KOPS (University of Konstanz)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I189712700","host_organization_name":"University of Konstanz","host_organization_lineage":["https://openalex.org/I189712700"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 26th Annual Computer Security Applications Conference on - ACSAC '10. New York, New York, USA: ACM Press, 2010, S. 171-180. ISBN 978-1-4503-0133-6. Verf\u00fcgbar unter: doi: 10.1145/1920261.1920288","raw_type":"doc-type:conferenceObject"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.222.6001","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.222.6001","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.hooklee.com/Papers/ACSAC2010_Full.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.224.4342","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.224.4342","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.hooklee.com/Papers/ACSAC2010.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.231.4277","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.231.4277","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"pmh:oai:alma.44SUR_INST:11139428610002346","doi":null,"is_oa":false,"landing_page_url":"http://www.hooklee.com/default.asp?t=eBankingCAPTCHAs","pdf_url":null,"source":{"id":"https://openalex.org/S4210197018","display_name":"Open Research (University of Surrey)","issn_l":"2688-268X","issn":["2688-268X","2688-3988"],"is_oa":false,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","dongbi-c","poland-20","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"}],"best_oa_location":{"id":"pmh:oai:kops.uni-konstanz.de:123456789/6246","doi":null,"is_oa":true,"landing_page_url":"http://nbn-resolving.de/urn:nbn:de:bsz:352-opus-127806","pdf_url":"https://kops.uni-konstanz.de/server/api/core/bitstreams/8645fb7e-eafd-461d-a6c7-67f7866073d9/content","source":{"id":"https://openalex.org/S4306401487","display_name":"KOPS (University of Konstanz)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I189712700","host_organization_name":"University of Konstanz","host_organization_lineage":["https://openalex.org/I189712700"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 26th Annual Computer Security Applications Conference on - ACSAC '10. New York, New York, USA: ACM Press, 2010, S. 171-180. ISBN 978-1-4503-0133-6. Verf\u00fcgbar unter: doi: 10.1145/1920261.1920288","raw_type":"doc-type:conferenceObject"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"},{"id":"https://openalex.org/F4320326505","display_name":"Universit\u00e4t Konstanz","ror":"https://ror.org/0546hnb39"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2000600322.pdf","grobid_xml":"https://content.openalex.org/works/W2000600322.grobid-xml"},"referenced_works_count":50,"referenced_works":["https://openalex.org/W22745672","https://openalex.org/W24291140","https://openalex.org/W112869242","https://openalex.org/W182783924","https://openalex.org/W781646922","https://openalex.org/W1431586989","https://openalex.org/W1482970723","https://openalex.org/W1488792172","https://openalex.org/W1491356287","https://openalex.org/W1560502112","https://openalex.org/W1568881000","https://openalex.org/W1602594923","https://openalex.org/W1603565383","https://openalex.org/W1726017835","https://openalex.org/W1823733029","https://openalex.org/W1934382142","https://openalex.org/W1969670714","https://openalex.org/W1998506139","https://openalex.org/W2017095397","https://openalex.org/W2019795436","https://openalex.org/W2045782640","https://openalex.org/W2077430078","https://openalex.org/W2084062832","https://openalex.org/W2088301450","https://openalex.org/W2099256741","https://openalex.org/W2107612984","https://openalex.org/W2108724351","https://openalex.org/W2112981015","https://openalex.org/W2113321599","https://openalex.org/W2115601549","https://openalex.org/W2122904057","https://openalex.org/W2125873654","https://openalex.org/W2125927592","https://openalex.org/W2130414230","https://openalex.org/W2143684471","https://openalex.org/W2147019420","https://openalex.org/W2150823190","https://openalex.org/W2153601419","https://openalex.org/W2156749117","https://openalex.org/W2161288388","https://openalex.org/W2165089674","https://openalex.org/W2167098532","https://openalex.org/W2171973097","https://openalex.org/W2294312922","https://openalex.org/W2295936755","https://openalex.org/W4206519171","https://openalex.org/W4231610351","https://openalex.org/W4246823949","https://openalex.org/W4247928114","https://openalex.org/W7027716524"],"related_works":["https://openalex.org/W1907828212","https://openalex.org/W2138698584","https://openalex.org/W7098384541","https://openalex.org/W2139711383","https://openalex.org/W2315696638","https://openalex.org/W7095553416","https://openalex.org/W7208453252","https://openalex.org/W7095365237","https://openalex.org/W2073458816","https://openalex.org/W182783924"],"abstract_inverted_index":{"Many":[0],"financial":[1,39,111],"institutions":[2,112],"have":[3],"deployed":[4,60],"CAPTCHAs":[5,18,21,44,59,155],"to":[6,17,25,76,133,136,143],"protect":[7],"their":[8],"services":[9],"(e.g.,":[10],"e-banking)":[11],"from":[12],"automated":[13,33],"attacks.":[14],"In":[15,48],"addition":[16],"for":[19,93,99],"login,":[20],"are":[22,106,115,130,157],"also":[23,139],"used":[24,107],"prevent":[26],"malicious":[27],"manipulation":[28],"of":[29,42,67,110,118,120,126,152],"e-banking":[30,43,58,79,90,103,121,145,154],"transactions":[31],"by":[32,108],"Man-in-the-Middle":[34],"(MitM)":[35],"attackers.":[36],"Despite":[37],"serious":[38],"risks,":[40],"security":[41],"is":[45,74],"largely":[46],"unexplored.":[47],"this":[49],"paper,":[50],"we":[51,83],"report":[52],"the":[53,62,86],"first":[54],"comprehensive":[55],"study":[56],"on":[57],"around":[61],"world.":[63],"A":[64],"new":[65],"set":[66],"image":[68],"processing":[69],"and":[70,96,148,160],"pattern":[71],"recognition":[72],"techniques":[73],"proposed":[75,128],"break":[77],"all":[78],"CAPTCHA":[80,91,104,146],"schemes":[81,92,98,105,147],"that":[82,156],"found":[84],"over":[85],"Internet,":[87],"including":[88],"three":[89],"transaction":[94],"verification":[95],"41":[97],"login.":[100],"These":[101],"broken":[102],"thousands":[109],"worldwide,":[113],"which":[114],"serving":[116],"hundreds":[117],"millions":[119],"customers.":[122],"The":[123],"success":[124],"rate":[125],"our":[127],"attacks":[129],"either":[131],"equal":[132],"or":[134],"close":[135],"100%.":[137],"We":[138],"discuss":[140],"possible":[141],"improvements":[142],"these":[144],"show":[149],"essential":[150],"difficulties":[151],"designing":[153],"both":[158],"secure":[159],"usable.":[161]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":5},{"year":2014,"cited_by_count":10},{"year":2013,"cited_by_count":6},{"year":2012,"cited_by_count":7}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2016-06-24T00:00:00"}