{"id":"https://openalex.org/W4415593837","doi":"https://doi.org/10.1109/access.2025.3626270","title":"Enhancing Two-Factor Authentication Security by Analyzing and Detecting SMS OTP-Interception Techniques in Android Malware","display_name":"Enhancing Two-Factor Authentication Security by Analyzing and Detecting SMS OTP-Interception Techniques in Android Malware","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415593837","doi":"https://doi.org/10.1109/access.2025.3626270"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3626270","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3626270","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3626270","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089551179","display_name":"Maciej Bart\u0142omiejczyk","orcid":"https://orcid.org/0000-0002-5004-4808"},"institutions":[{"id":"https://openalex.org/I155313962","display_name":"West Pomeranian University of Technology in Szczecin","ror":"https://ror.org/0596m7f19","country_code":"PL","type":"education","lineage":["https://openalex.org/I155313962"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Maciej Bart\u0142omiejczyk","raw_affiliation_strings":["West Pomeranian University of Technology, Szczecin, Poland"],"raw_orcid":"https://orcid.org/0000-0002-5004-4808","affiliations":[{"raw_affiliation_string":"West Pomeranian University of Technology, Szczecin, Poland","institution_ids":["https://openalex.org/I155313962"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089301299","display_name":"Imed El Fray","orcid":"https://orcid.org/0000-0002-3060-488X"},"institutions":[{"id":"https://openalex.org/I155313962","display_name":"West Pomeranian University of Technology in Szczecin","ror":"https://ror.org/0596m7f19","country_code":"PL","type":"education","lineage":["https://openalex.org/I155313962"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Imed El Fray","raw_affiliation_strings":["West Pomeranian University of Technology, Szczecin, Poland"],"raw_orcid":"https://orcid.org/0000-0002-3060-488X","affiliations":[{"raw_affiliation_string":"West Pomeranian University of Technology, Szczecin, Poland","institution_ids":["https://openalex.org/I155313962"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031268662","display_name":"Faouzi Kamoun","orcid":"https://orcid.org/0000-0002-3740-1452"},"institutions":[{"id":"https://openalex.org/I4210112335","display_name":"\u00c9cole Sup\u00e9rieure Priv\u00e9e d'Ing\u00e9nierie et de Technologies","ror":"https://ror.org/021f99908","country_code":"TN","type":"education","lineage":["https://openalex.org/I4210112335"]}],"countries":["TN"],"is_corresponding":false,"raw_author_name":"Faouzi Kamoun","raw_affiliation_strings":["ESPRIT School of Business, ESPRIT School of Engineering, Ariana, Tunisia","ESPRIT School of Business, ESPRIT School of Engineering, Tunisia"],"raw_orcid":"https://orcid.org/0000-0002-3740-1452","affiliations":[{"raw_affiliation_string":"ESPRIT School of Business, ESPRIT School of Engineering, Ariana, Tunisia","institution_ids":["https://openalex.org/I4210112335"]},{"raw_affiliation_string":"ESPRIT School of Business, ESPRIT School of Engineering, Tunisia","institution_ids":["https://openalex.org/I4210112335"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.34840871,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"185926","last_page":"185942"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9865999817848206,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9815999865531921,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8727999925613403},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.7093999981880188},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.5813000202178955},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5291000008583069},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.5264000296592712},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.5231999754905701},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.5142999887466431},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.43779999017715454}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8727999925613403},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8388000130653381},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.7093999981880188},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6808000206947327},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.5813000202178955},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5291000008583069},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.5264000296592712},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.5231999754905701},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.5142999887466431},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.43779999017715454},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.4171999990940094},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4004000127315521},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.376800000667572},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.36880001425743103},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3677000105381012},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.3652999997138977},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.3474000096321106},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.3441999852657318},{"id":"https://openalex.org/C188087704","wikidata":"https://www.wikidata.org/wiki/Q369577","display_name":"Standardization","level":2,"score":0.31049999594688416},{"id":"https://openalex.org/C2779818221","wikidata":"https://www.wikidata.org/wiki/Q837330","display_name":"Bytecode","level":3,"score":0.2782000005245209},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.26570001244544983}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3626270","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3626270","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b37d2ddcd3484d5a9366ecb4ad7087ed","is_oa":true,"landing_page_url":"https://doaj.org/article/b37d2ddcd3484d5a9366ecb4ad7087ed","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 185926-185942 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3626270","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3626270","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Two-factor":[0],"authentication":[1],"(2FA)":[2],"is":[3,108],"a":[4,23,98,156],"foundational":[5],"security":[6],"mechanism":[7],"that":[8,183,214],"significantly":[9],"enhances":[10],"user":[11],"identity":[12],"verification's":[13],"reliability.":[14],"Despite":[15],"the":[16,50,58,66,95,116,143,191,205,225],"availability":[17],"of":[18,53,80,97,110,118,145,180,190],"various":[19],"2FA":[20],"implementation":[21],"methods,":[22],"considerable":[24],"proportion":[25],"still":[26],"relies":[27],"on":[28,93,104],"SMS-based":[29],"one-time":[30],"passwords":[31],"(SMS":[32],"OTP).":[33],"This":[34],"approach,":[35],"however,":[36],"has":[37],"been":[38],"widely":[39],"discouraged":[40],"by":[41],"prominent":[42],"cybersecurity":[43],"standardization":[44],"and":[45,55,65,174,207],"advisory":[46],"bodies":[47],"such":[48,150],"as":[49],"National":[51],"Institute":[52],"Standards":[54],"Technology":[56],"(NIST),":[57],"European":[59],"Union":[60],"Agency":[61],"for":[62,202],"Cybersecurity":[63],"(ENISA),":[64],"Open":[67],"Worldwide":[68],"Application":[69],"Security":[70],"Project":[71],"(OWASP)":[72],"due":[73],"to":[74,77,127,136,224],"its":[75],"susceptibility":[76],"multiple":[78],"types":[79],"attacks,":[81],"including":[82,171],"those":[83],"involving":[84],"malware.":[85,151],"The":[86,121,176,210],"research":[87],"presented":[88],"in":[89,115,148],"this":[90,154],"paper":[91],"focuses":[92],"evaluating":[94],"resilience":[96],"proposed":[99,192],"malware":[100,113,124,181,193,203],"detection":[101,194,200],"approach":[102],"based":[103],"static":[105,146,216],"analysis,":[106],"which":[107],"capable":[109],"detecting":[111,149],"SMS-stealing":[112],"even":[114,221],"presence":[117],"code":[119,139,227],"obfuscation.":[120],"study":[122],"targeted":[123],"applications":[125],"designed":[126],"intercept":[128,185],"SMS":[129,159,186],"OTP":[130],"codes.":[131],"A":[132],"key":[133],"objective":[134],"was":[135,164],"assess":[137],"whether":[138],"obfuscation":[140,228],"techniques":[141,218],"hinder":[142],"effectiveness":[144],"analysis":[147,217],"To":[152],"facilitate":[153],"evaluation,":[155],"dedicated":[157],"dataset,":[158],"Stealing":[160],"Malware":[161],"Dataset":[162],"(SSMD),":[163],"constructed":[165],"using":[166],"samples":[167,182],"from":[168],"existing":[169],"collections,":[170],"CICMalAnal2017,":[172],"DREBIN,":[173],"RmvDroid.":[175],"SSMD":[177],"consists":[178],"exclusively":[179],"actively":[184],"OTPs.":[187],"Experimental":[188],"validation":[189],"method":[195],"demonstrated":[196],"an":[197],"almost":[198],"70%":[199],"rate":[201],"exploiting":[204],"READ_SMS":[206],"RECEIVE_SMS":[208],"permissions.":[209],"results":[211],"further":[212],"demonstrate":[213],"permission-based":[215],"remain":[219],"effective,":[220],"when":[222],"subjected":[223],"evaluated":[226],"strategies.":[229]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-28T00:00:00"}