[{“box”:0,”content”:”n[if 992 equals=”Open Access”]n
n
Open Access
nn
n
n[/if 992]n
n
n
n
n
n
Aiswarya Dwarampudi, Yamuna Mundru, Manas Kumar Yogi
n
- n t
n
n
n[/foreach]
n
n[if 2099 not_equal=”Yes”]n
- [foreach 286] [if 1175 not_equal=””]n t
- Assistant Professor, Assistant Professor, Assistant Professor CSE Department, Pragati Engineering College, Near Kakinada, Kakinada District, CSE –AI & ML Department, Pragati Engineering College, Near Kakinada, Kakinada District, CSE Department, Pragati Engineering College, Near Kakinada, Kakinada District Andhra Pradesh, Andhra Pradesh, Andhra Pradesh India, India, India
n[/if 1175][/foreach]
n[/if 2099][if 2099 equals=”Yes”][/if 2099]n
Abstract
nThis study investigates the exploitable weaknesses inherent in QR code technology, aiming to provide insights into potential security risks and mitigation strategies. QR codes, ubiquitous in modern society, serve various purposes ranging from marketing to authentication. However, their widespread utilization also renders them vulnerable to exploits by malicious actors. The research identifies common vulnerabilities such as data tampering, code injection, and phishing attacks, which can have significant consequences including financial losses, data breaches, and privacy violations. To address these vulnerabilities, the study proposes a multifaceted approach encompassing authentication mechanisms, secure QR code generation practices, and user awareness programs. Furthermore, emphasizing compliance with industry standards and regulations is highlighted as a crucial aspect of QR code security. Through a comprehensive analysis of QR code weaknesses and their implications, this study underscores the importance of proactively addressing security risks to maintain trust and integrity in digital transactions involving QR codes. By enhancing QR code security measures and fostering collaboration among stakeholders, organizations and individuals can mitigate risks and ensure the reliability of QR code-based interactions in an increasingly interconnected digital landscape.
n
Keywords: QR Code, pattern, security, data protection, encoding, decoding
n[if 424 equals=”Regular Issue”][This article belongs to Journal Of Network security(jons)]
n
n
n
n
n
nn[if 992 equals=”Open Access”] Full Text PDF Download[/if 992] n
nn[if 379 not_equal=””]n
Browse Figures
n
n[/if 379]n
References
n[if 1104 equals=””]n
- Dabrowski A, Krombholz K, Ullrich J, Weippl ER. QR inception: Barcode-in-barcode attacks. InProceedings of the 4th ACM workshop on security and privacy in smartphones & mobile devices 2014 Nov 7 (pp. 3–10).
- Han X, Zhang Y, Zhang X, Chen Z, Wang M, Zhang Y, Ma S, Yu Y, Bertino E, Li J. Medusa Attack: Exploring Security Hazards of {In-App}{QR} Code Scanning. In32nd USENIX Security Symposium (USENIX Security 23) 2023 (pp. 4607–4624).
- Tribak H, Gaou M, Gaou S, Zaz Y. QR code recognition based on HOG and multiclass SVM classifier. Multimedia Tools and Applications. 2023 Nov 13:1–30.
- Lin D, Stamp M. Hunting for undetectable metamorphic viruses. Journal in computer virology. 2011 Aug;7:201–14.
- Mannan M, Barrera D, Brown CD, Lie D, Van Oorschot PC. Mercury: Recovering forgotten passwords using personal devices. In Financial Cryptography and Data Security: 15th International Conference, FC 2011, Gros Islet, St. Lucia, February 28-March 4, 2011, Revised Selected Papers 15 2012 (pp. 315–330). Springer Berlin Heidelberg.
- Kals S, Kirda E, Kruegel C, Jovanovic N. Secubat: a web vulnerability scanner. InProceedings of the 15th international conference on World Wide Web 2006 May 23 (pp. 247–256).
- Ali H, Kharade KG, Kamat RK. An analysis and evaluation of vulnerability assessment tools. Cyberpsychol Behav Soc Netw. 2022;25(4):448–56.
- Vuagnoux M, Pasini S. An improved technique to discover compromising electromagnetic emanations. In2010 IEEE International Symposium on Electromagnetic Compatibility 2010 Jul 25 (pp. 121–126). IEEE.
- Elbaz L, Bar-El H. Discretix Technologies Ltd. Using PKC in Mobile Phones, White Paper. 2000 Oct.
- Viega J, Bloch JT, Kohno T, McGraw G. Token-based scanning of source code for security problems. ACM Transactions on Information and System Security (TISSEC). 2002 Aug 1;5(3):238–61.
- Phillips SK. Creating feedback channels with optical communications for Information Operations (IO) (Doctoral dissertation, Monterey, California: Naval Postgraduate School). https://core.ac.uk/download/pdf/45464713.pdf
- Blaze M. Election integrity and technology: vulnerabilities and solutions. Geo. L. Tech. Rev.. 2019;4:505.
- Black PE, Kass M, Koo M, Fong E. Source code security analysis tool functional specification version 1.0. US Department of Commerce, National Institute of Standards and Technology; 2007 May 1.
- Bletsch T, Jiang X, Freeh V. Mitigating code-reuse attacks with control-flow locking. InProceedings of the 27th Annual Computer Security Applications Conference 2011 Dec 5 (pp. 353–362).
nn[/if 1104][if 1104 not_equal=””]n
- [foreach 1102]n t
- [if 1106 equals=””], [/if 1106][if 1106 not_equal=””],[/if 1106]
n[/foreach]
n[/if 1104]
nn
nn[if 1114 equals=”Yes”]n
n[/if 1114]
n
n
n
| Volume | 12 | |
| [if 424 equals=”Regular Issue”]Issue[/if 424][if 424 equals=”Special Issue”]Special Issue[/if 424] [if 424 equals=”Conference”][/if 424] | 02 | |
| Received | February 29, 2024 | |
| Accepted | April 25, 2024 | |
| Published | July 2, 2024 |
n
n
n
n
n
n function myFunction2() {n var x = document.getElementById(“browsefigure”);n if (x.style.display === “block”) {n x.style.display = “none”;n }n else { x.style.display = “Block”; }n }n document.querySelector(“.prevBtn”).addEventListener(“click”, () => {n changeSlides(-1);n });n document.querySelector(“.nextBtn”).addEventListener(“click”, () => {n changeSlides(1);n });n var slideIndex = 1;n showSlides(slideIndex);n function changeSlides(n) {n showSlides((slideIndex += n));n }n function currentSlide(n) {n showSlides((slideIndex = n));n }n function showSlides(n) {n var i;n var slides = document.getElementsByClassName(“Slide”);n var dots = document.getElementsByClassName(“Navdot”);n if (n > slides.length) { slideIndex = 1; }n if (n (item.style.display = “none”));n Array.from(dots).forEach(n item => (item.className = item.className.replace(” selected”, “”))n );n slides[slideIndex – 1].style.display = “block”;n dots[slideIndex – 1].className += ” selected”;n }nn”}]