{"id":"https://openalex.org/W2062746436","doi":"https://doi.org/10.1109/ccst.2012.6393556","title":"A concept of automated vulnerability search in contactless communication applications","display_name":"A concept of automated vulnerability search in contactless communication applications","publication_year":2012,"publication_date":"2012-10-01","ids":{"openalex":"https://openalex.org/W2062746436","doi":"https://doi.org/10.1109/ccst.2012.6393556","mag":"2062746436"},"language":"en","primary_location":{"id":"doi:10.1109/ccst.2012.6393556","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccst.2012.6393556","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 IEEE International Carnahan Conference on Security Technology (ICCST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041953540","display_name":"Martin Henzl","orcid":null},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Martin Henzl","raw_affiliation_strings":["Department of Intelligent Systems, Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Intelligent Systems, Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008969416","display_name":"Petr Han\u00e1\u010dek","orcid":"https://orcid.org/0000-0001-5507-0768"},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Petr Hanacek","raw_affiliation_strings":["Department of Intelligent Systems, Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Intelligent Systems, Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078518177","display_name":"Peter Jurne\u010dka","orcid":null},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Peter Jurnecka","raw_affiliation_strings":["Department of Intelligent Systems, Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Intelligent Systems, Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037597916","display_name":"Matej Kacic","orcid":null},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Matej Kacic","raw_affiliation_strings":["Department of Intelligent Systems, Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Intelligent Systems, Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I60587646"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"180","last_page":"186"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/eavesdropping","display_name":"Eavesdropping","score":0.865066647529602},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8422694206237793},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6887853741645813},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6880710124969482},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6559726595878601},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.655273973941803},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6099056601524353},{"id":"https://openalex.org/keywords/smart-card","display_name":"Smart card","score":0.5633305907249451},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.5271962285041809},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.4788053631782532},{"id":"https://openalex.org/keywords/near-field-communication","display_name":"Near field communication","score":0.4620288014411926},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.4602597653865814},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.45538049936294556},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4350012540817261},{"id":"https://openalex.org/keywords/secure-communication","display_name":"Secure communication","score":0.42178624868392944},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.4192991554737091},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.35213154554367065},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14019787311553955},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.12413957715034485},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.11416727304458618}],"concepts":[{"id":"https://openalex.org/C2776788033","wikidata":"https://www.wikidata.org/wiki/Q320769","display_name":"Eavesdropping","level":2,"score":0.865066647529602},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8422694206237793},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6887853741645813},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6880710124969482},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6559726595878601},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.655273973941803},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6099056601524353},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.5633305907249451},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.5271962285041809},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.4788053631782532},{"id":"https://openalex.org/C175604262","wikidata":"https://www.wikidata.org/wiki/Q273353","display_name":"Near field communication","level":3,"score":0.4620288014411926},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.4602597653865814},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.45538049936294556},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4350012540817261},{"id":"https://openalex.org/C510870077","wikidata":"https://www.wikidata.org/wiki/Q7444868","display_name":"Secure communication","level":3,"score":0.42178624868392944},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.4192991554737091},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35213154554367065},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14019787311553955},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.12413957715034485},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.11416727304458618},{"id":"https://openalex.org/C96122199","wikidata":"https://www.wikidata.org/wiki/Q628096","display_name":"Ultra high frequency","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ccst.2012.6393556","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccst.2012.6393556","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 IEEE International Carnahan Conference on Security Technology (ICCST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6800000071525574,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320330678","display_name":"Australian Academy of Technology and Engineering","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W203757321","https://openalex.org/W1543653153","https://openalex.org/W1583816927","https://openalex.org/W1832469506","https://openalex.org/W1995841147","https://openalex.org/W2004940866","https://openalex.org/W2029693536","https://openalex.org/W2039875296","https://openalex.org/W2111336263","https://openalex.org/W2140246151","https://openalex.org/W2142351551","https://openalex.org/W2154209904","https://openalex.org/W2480927829","https://openalex.org/W4403326056","https://openalex.org/W6632367441","https://openalex.org/W6676893480","https://openalex.org/W6680861166"],"related_works":["https://openalex.org/W2107510936","https://openalex.org/W2179304688","https://openalex.org/W2008592783","https://openalex.org/W2004278744","https://openalex.org/W2159690530","https://openalex.org/W2027779752","https://openalex.org/W4294294414","https://openalex.org/W2620797757","https://openalex.org/W2962825342","https://openalex.org/W4224325276"],"abstract_inverted_index":{"Designing":[0],"and":[1,234,298],"implementing":[2],"secure":[3,14,56,95,101],"applications":[4],"which":[5,77,130,167,285,291],"use":[6],"contactless":[7,24,221],"communication":[8,30,183,222,238],"link":[9],"is":[10,16,54,136,145],"difficult":[11],"even":[12,50],"when":[13],"hardware":[15],"used.":[17],"Many":[18],"current":[19],"proximity":[20],"devices,":[21,31],"such":[22,141],"as":[23],"smart":[25,102],"cards":[26],"or":[27,124,289],"near":[28],"field":[29],"are":[32,131,151,168],"verified":[33],"to":[34,81,104,139,153,171,187,195,199,206],"be":[35,120,172,178,250,274,279,287],"highly":[36],"secure;":[37],"however,":[38],"inappropriate":[39],"protocol":[40,53,71,97],"implementation":[41,72],"may":[42],"result":[43,293],"in":[44,70,121,125,294],"the":[45,52,106,108,116,147,181,190,197,200,204,215,219,245,266,295],"leak":[46],"of":[47,66,90,128,203,236],"sensitive":[48],"information,":[49],"if":[51],"also":[55,86],"by":[57,73,180,252],"itself.":[58],"In":[59],"this":[60,144],"paper":[61],"we":[62],"show":[63,87,105,188],"a":[64,126,208,212],"concept":[65],"automated":[67,148],"vulnerability":[68,115,284],"search":[69],"using":[74,99],"verification":[75,149],"methods,":[76],"should":[78],"help":[79,244],"developers":[80],"verify":[82],"their":[83],"applications.":[84],"We":[85,185],"simple":[88],"example":[89],"possible":[91],"attack":[92,272,277],"on":[93],"seemingly":[94,100],"payment":[96],"implemented":[98],"card":[103],"way":[107],"adversary":[109,191],"can":[110,119,163,177,243,273,278],"abuse":[111],"improper":[112],"implementation.":[113],"The":[114,175,225,240,276],"attacker":[117],"exploits":[118],"one":[122],"command":[123],"combination":[127],"commands,":[129],"not":[132,137,169,193,249],"vulnerable":[133],"individually.":[134],"It":[135],"easy":[138],"find":[140,165],"combinations":[142],"manually,":[143],"where":[146],"methods":[150],"put":[152],"use.":[154],"A":[155],"model":[156,176,256,267,296,300],"checker,":[157],"provided":[158],"with":[159],"an":[160,271],"appropriate":[161],"model,":[162],"automatically":[164],"vulnerabilities":[166],"likely":[170],"found":[173],"manually.":[174],"created":[179],"actual":[182,220],"analysis.":[184],"wanted":[186],"that":[189],"does":[192],"have":[194,196],"access":[198],"source":[201,241,258],"code":[202,242,259],"application":[205,216],"perform":[207],"successful":[209],"attack,":[210,233],"so":[211,254],"platform":[213,226],"for":[214,231,262],"analysis":[217],"from":[218,257],"was":[223,260],"developed.":[224],"provides":[227],"eavesdropping,":[228],"altering":[229],"data":[230],"man-in-the-middle":[232],"emulating":[235],"both":[237],"parties.":[239],"analysis,":[246],"but":[247],"would":[248,292],"sufficient":[251],"itself,":[253],"creating":[255],"left":[261],"future":[263],"research.":[264],"When":[265],"checker":[268,301],"finds":[269],"vulnerability,":[270],"executed.":[275],"either":[280],"successful,":[281],"revealing":[282],"real":[283],"must":[286],"fixed,":[288],"unsuccessful,":[290],"refinement":[297],"another":[299],"run.":[302]},"counts_by_year":[{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}