dissertation.bib

@inproceedings{jensen1,
  title={A secure credit card protocol over {NFC}},
  author={Jensen, Oliver and Gouda, Mohamed and Qiu, Lili},
  booktitle={Proceedings of the 17th International Conference on Distributed Computing and Networking},
  pages={32},
  year={2016},
  organization={ACM}
}

@inproceedings{jensen2,
  title={Securing {NFC} Credit Card Payments Against Malicious Retailers},
  author={Jensen, Oliver and O'Meara, Tyler and Gouda, Mohamed},
  booktitle={International Conference on Networked Systems},
  pages={214--228},
  year={2016},
  organization={Springer}
}



@inproceedings{anderson2007position,
  title={Position statement in {RFID} {S\&P} panel: {RFID} and the middleman},
  author={Anderson, Ross},
  booktitle={International Conference on Financial Cryptography and Data Security},
  pages={46--49},
  year={2007},
  organization={Springer}
}

@inproceedings{kortvedt2009eavesdropping,
  title={Eavesdropping near field communication},
  author={Kortvedt, Henning and Mjolsnes, S},
  booktitle={The Norwegian Information Security Conference (NISK)},
  year={2009}
}

@MastersThesis{kortvedt2009securing,
    author     =     {Kortvedt, Henning Siitonen},
    title     =     {Securing Near Field Communication},
    school     =     {Norwegian University of Science and Technology},
    address     =     {Norway},
    year     =     {2009},
    }

@inproceedings{haselsteiner2006security,
  title={Security in near field communication ({NFC})},
  author={Haselsteiner, Ernst and Breitfu{\ss}, Klemens},
  booktitle={Workshop on RFID security},
  pages={12--14},
  year={2006}
}

@article{eun2013conditional,
  title={Conditional privacy preserving security protocol for {NFC} applications},
  author={Eun, Hasoo and Lee, Hoonjung and Oh, Heekuck},
  journal={Consumer Electronics, IEEE Transactions on},
  volume={59},
  number={1},
  pages={153--160},
  year={2013},
  publisher={IEEE}
}


@inproceedings{madlmayr2008nfc,
  title={{NFC} devices: Security and privacy},
  author={Madlmayr, Gerald and Langer, Josef and Kantner, Christian and Scharinger, Josef},
  booktitle={Availability, Reliability and Security, 2008. ARES 08. Third International Conference on},
  pages={642--647},
  year={2008},
  organization={IEEE}
}


@misc{nmhack,
  author = {Elizabeth Harris, Nicole Perlroth, Natheniel Popper},
  title = {Neiman Marcus Data Breach Worse Than First Said},
  howpublished = {\url{http://www.nytimes.com/2014/01/24/business/neiman-marcus-breach-affected-1-1-million-cards.html}},
  note = {Accessed: 2014-11-10}
}

@misc{targetpregnant,
  author = {Elizabeth Harris, Nicole Perlroth, Natheniel Popper},
  title = {Neiman Marcus Data Breach Worse Than First Said},
  howpublished = {\url{http://www.nytimes.com/2012/02/19/magazine/shopping-habits.html}},
  note = {Accessed: 2015-05-10}
}

@misc{supervaluhack,
  author = {Clare Kennedy},
  title = {Millions of card numbers likely stolen during {Supervalu} data breach, security expert says},
  howpublished = {\url{http://www.bizjournals.com/twincities/news/2014/08/18/supervalu-millions-card-numbers-likely-stolen.html?page=all}},
  note = {Accessed: 2014-11-10}
}

@misc{pfchanghack,
  author = {Brian Krebs},
  title = {{P.F. Chang's} Breach Likely Began in {Sept.} 2013},
  howpublished = {\url{http://krebsonsecurity.com/2014/06/p-f-changs-breach-likely-began-in-sept-2013/}},
  note = {Accessed: 2014-11-10}
}

@misc{targethack,
  author = {Robin Sidel, Danny Yadron, Sara Germano},
  title = {Target Hit by Credit-Card Breach},
  howpublished = {\url{http://online.wsj.com/articles/SB10001424052702304773104579266743230242538}},
  note = {Accessed: 2014-11-10}
}

@misc{homedepothack,
  author = {Robin Sidel},
  title = {{Home Depot's} 56 Million Card Breach Bigger Than {Target's}},
  howpublished = {\url{http://online.wsj.com/articles/home-depot-breach-bigger-than-targets-1411073571}},
  note = {Accessed: 2014-11-10}
}

@misc{neimanmarcushack,
  author = {Elizabeth Harris, Nicole Perlroth, Natheniel Popper},
  title = {{Neiman Marcus} Data Breach Worse Than First Said},
  howpublished = {\url{http://www.nytimes.com/2014/01/24/business/neiman-marcus-breach-affected-1-1-million-cards.html}},
  note = {Accessed: 2014-11-10}
}


@ARTICLE{diffiehellman,
author={Diffie, W. and Hellman, M.E.},
journal={Information Theory, IEEE Transactions on},
title={New directions in cryptography},
year={1976},
month={Nov},
volume={22},
number={6},
pages={644-654},
keywords={Cryptography;Application software;Communication system security;Computer aided instruction;Computer networks;Costs;Hardware;Information theory;Postal services;Public key cryptography;Telecommunication computing},
doi={10.1109/TIT.1976.1055638},
ISSN={0018-9448},}

@article{RSA,
 author = {Rivest, R. L. and Shamir, A. and Adleman, L.},
 title = {A Method for Obtaining Digital Signatures and Public-key Cryptosystems},
 journal = {Commun. ACM},
 issue_date = {Feb. 1978},
 volume = {21},
 number = {2},
 month = feb,
 year = {1978},
 issn = {0001-0782},
 pages = {120--126},
 numpages = {7},
 url = {http://doi.acm.org/10.1145/359340.359342},
 doi = {10.1145/359340.359342},
 acmid = {359342},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {authentication, cryptography, digital signatures, electronic funds transfer, electronic mail, factorization, message-passing, prime number, privacy, public-key cryptosystems, security},
}

@inproceedings{lee2012nfc,
  title={{NFC} hacking: The easy way},
  author={Lee, Eddie},
  booktitle={Defcon hacking conference},
  volume={20},
  year={2012}
}

@inproceedings{roland2013cloning,
  title={Cloning Credit Cards: A Combined Pre-play and Downgrade Attack on {EMV} Contactless.},
  author={Roland, Michael and Langer, Josef},
  booktitle={WOOT},
  year={2013}
}

@inproceedings{roland2012relay,
  title={Relay attacks on secure element-enabled mobile devices},
  author={Roland, Michael and Langer, Josef and Scharinger, Josef},
  booktitle={IFIP International Information Security Conference},
  pages={1--12},
  year={2012},
  organization={Springer}
}

@article{uuid,
  title={{RFC} 4122: A universally unique identifier ({UUID}) {URN} namespace},
  author={Leach, Paul J and Mealling, Michael and Salz, Rich},
  year={2005}
}

@inproceedings{Drimer:2007:KYE:1362903.1362910,
 author = {Drimer, Saar and Murdoch, Steven J.},
 title = {Keep Your Enemies Close: Distance Bounding Against Smartcard Relay Attacks},
 booktitle = {Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium},
 series = {SS'07},
 year = {2007},
 isbn = {111-333-5555-77-9},
 location = {Boston, MA},
 pages = {7:1--7:16},
 articleno = {7},
 numpages = {16},
 url = {http://dl.acm.org/citation.cfm?id=1362903.1362910},
 acmid = {1362910},
 publisher = {USENIX Association},
 address = {Berkeley, CA, USA},
}

@inproceedings{hancke2005rfid,
  title={An RFID distance bounding protocol},
  author={Hancke, Gerhard P and Kuhn, Markus G},
  booktitle={Security and Privacy for Emerging Areas in Communications Networks, 2005. SecureComm 2005. First International Conference on},
  pages={67--73},
  year={2005},
  organization={IEEE}
}








@MANUAL{nfcspec,
	TITLE = "Near Field Communication - Interface and Protocol",
	ORGANIZATION = "ECMA",
	EDITION = {3},
	NUMBER = {340},
	MONTH = "June",
	YEAR = {2013}
}

@MANUAL{nfciso,
   NUMBER = {14443},
   ORGANIZATION = "ISO 14443",
   title = {{Identification cards - Contactless integrated circuit(s) cards - Proximity cards}},
   year = {2000},
}

@MANUAL{emv,
 ORGANIZATION = {EMVCo. LLC},
 VERSION= {2.6},
 title = {{EMV} Contactless Specifications for Payment Systems - Contactless Communication Protocol},
 url = {http://www.emvco.com/},
 YEAR = {2016},
 MONTH = "March"
}

@MANUAL{paypass,
   ORGANIZATION = "MasterCard",
   VERSION= {1.3},
   MONTH = "November",
   YEAR = {2007},
   title = {{PayPass - Mag Stripe - Security Architecture}}
}

@MANUAL{paywave,
  author = {Visa},
  title = {Visa Contactless Payment Specification},
  VERSION={2.2},
  MONTH="Janary",
  YEAR={2016},
}


article{kortvedt2009securing,
  title={Securing Near Field Communication},
  author={Kortvedt, Henning Siitonen},
  year={2009},
  publisher={Institutt for telematikk}
}

inproceedings{haselsteiner2006security,
  title={Security in near field communication ({NFC})},
  author={Haselsteiner, Ernst and Breitfu{\ss}, Klemens},
  booktitle={Workshop on RFID security},
  pages={12--14},
  year={2006}
}

article{eun2013conditional,
  title={Conditional privacy preserving security protocol for {NFC} applications},
  author={Eun, Hasoo and Lee, Hoonjung and Oh, Heekuck},
  journal={Consumer Electronics, IEEE Transactions on},
  volume={59},
  number={1},
  pages={153--160},
  year={2013},
  publisher={IEEE}
}

misc{lee2012nfc,
  title={{NFC} hacking: The easy way},
  author={Lee, Eddie},
  year={2012},
  publisher={DEFCON}
}



inproceedings{madlmayr2008nfc,
  title={{NFC} devices: Security and privacy},
  author={Madlmayr, Gerald and Langer, Josef and Kantner, Christian and Scharinger, Josef},
  booktitle={Availability, Reliability and Security, 2008. ARES 08. Third International Conference on},
  pages={642--647},
  year={2008},
  organization={IEEE}
}


ARTICLE{diffiehellman,
author={Diffie, W. and Hellman, M.E.},
journal={Information Theory, IEEE Transactions on},
title={New directions in cryptography},
year={1976},
month={Nov},
volume={22},
number={6},
pages={644-654},
keywords={Cryptography;Application software;Communication system security;Computer aided instruction;Computer networks;Costs;Hardware;Information theory;Postal services;Public key cryptography;Telecommunication computing},
doi={10.1109/TIT.1976.1055638},
ISSN={0018-9448},}

@article{RSA,
 author = {Rivest, R. L. and Shamir, A. and Adleman, L.},
 title = {A Method for Obtaining Digital Signatures and Public-key Cryptosystems},
 journal = {Commun. ACM},
 issue_date = {Feb. 1978},
 volume = {21},
 number = {2},
 month = feb,
 year = {1978},
 issn = {0001-0782},
 pages = {120--126},
 numpages = {7},
 url = {http://doi.acm.org/10.1145/359340.359342},
 doi = {10.1145/359340.359342},
 acmid = {359342},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {authentication, cryptography, digital signatures, electronic funds transfer, electronic mail, factorization, message-passing, prime number, privacy, public-key cryptosystems, security},
}

@misc{NFCProxy,
author =   {Blackwing HQ},
title =    {{NFCProxy}},
howpublished = {\url{http://sourceforge.net/projects/nfcproxy/}},
year = {2012}
}



@Article{Coskun2013,
author="Coskun, Vedat
and Ozdenizci, Busra
and Ok, Kerem",
title="A Survey on Near Field Communication ({NFC}) Technology",
journal="Wireless Personal Communications",
year="2013",
volume="71",
number="3",
pages="2259--2294",
abstract="Near Field Communication (NFC) as a promising short range wireless communication technology facilitates mobile phone usage of billions of people throughout the world that offers diverse services ranging from payment and loyalty applications to access keys for offices and houses. Eventually NFC technology integrates all such services into one single mobile phone. NFC technology has emerged lately, and consequently not much academic source is available yet. On the contrary, due to its promising business case options, there will be an increasing amount of work to be studied in the very close future. This paper presents the concept of NFC technology in a holistic approach with different perspectives, including communication essentials with standards, ecosystem and business issues, applications, and security issues. Open research areas and further recommended studies in terms of academic and business point of view are also explored and discussed at the end of each major subject's subsection. This comprehensive survey will be a valuable guide for researchers and academicians as well as for business world interested in NFC technology.",
issn="1572-834X",
doi="10.1007/s11277-012-0935-5",
url="http://dx.doi.org/10.1007/s11277-012-0935-5"
}


@inproceedings{roland2013applying,
  title={Applying relay attacks to {Google Wallet}},
  author={Roland, Michael and Langer, Josef and Scharinger, Josef},
  booktitle={Near Field Communication (NFC), 2013 5th International Workshop on},
  pages={1--6},
  year={2013},
  organization={IEEE}
}

@inproceedings{roland2012practical,
  title={Practical attack scenarios on secure element-enabled mobile devices},
  author={Roland, Michael and Langer, Josef and Scharinger, Josef},
  booktitle={Near Field Communication (NFC), 2012 4th International Workshop on},
  pages={19--24},
  year={2012},
  organization={IEEE}
}

@inproceedings{roland2012software,
  title={Software card emulation in {NFC}-enabled mobile phones: great advantage or security nightmare},
  author={Roland, Michael},
  booktitle={Fourth International Workshop on Security and Privacy in Spontaneous Interaction and Mobile Phone Use},
  pages={1--6},
  year={2012}
}

@inproceedings{nandakumar2013dhwani,
  title={Dhwani: secure peer-to-peer acoustic {NFC}},
  author={Nandakumar, Rajalakshmi and Chintalapudi, Krishna Kant and Padmanabhan, Venkat and Venkatesan, Ramarathnam},
  booktitle={ACM SIGCOMM Computer Communication Review},
  volume={43},
  pages={63--74},
  year={2013},
  organization={ACM}
}

@article{francis2010security,
  title={On the security issues of {NFC} enabled mobile phones},
  author={Francis, Lishoy and Hancke, Gerhard and Mayes, Keith and Markantonakis, Konstantinos},
  journal={International Journal of Internet Technology and Secured Transactions},
  volume={2},
  number={3-4},
  pages={336--356},
  year={2010},
  publisher={Inderscience Publishers}
}

@incollection{francis2010practical,
  title={Practical {NFC} peer-to-peer relay attack using mobile phones},
  author={Francis, Lishoy and Hancke, Gerhard and Mayes, Keith and Markantonakis, Konstantinos},
  booktitle={Radio Frequency Identification: Security and Privacy Issues},
  pages={35--49},
  year={2010},
  publisher={Springer}
}

@article{markantonakis2012practical,
  title={Practical relay attack on contactless transactions by using {NFC} mobile phones},
  author={Markantonakis, Konstantinos and Francis, Lishoy and Hancke, Gerhard and Mayes, Keith},
  journal={Radio Frequency Identification System Security: RFIDsec},
  volume={12},
  pages={21},
  year={2012}
}

@inproceedings{chen2010using,
  title={Using {3G} network components to enable {NFC} mobile transactions and authentication},
  author={Chen, Wei-Dar and Hancke, GP and Mayes, KE and Lien, Y and Chiu, JH},
  booktitle={Progress in Informatics and Computing (PIC), 2010 IEEE International Conference on},
  volume={1},
  pages={441--448},
  year={2010},
  organization={IEEE}
}

@article{lifchitz2012hacking,
  title={Hacking the {NFC} credit cards for fun and debit},
  author={Lifchitz--BT, Renaud},
  year={2012}
}

@article{hancke2005practical,
  title={A practical relay attack on ISO 14443 proximity cards},
  author={Hancke, Gerhard P},
  journal={Technical report, University of Cambridge Computer Laboratory},
  volume={59},
  pages={382--385},
  year={2005}
}

@inproceedings{kfir2005picking,
  title={Picking virtual pockets using relay attacks on contactless smartcard},
  author={Kfir, Ziv and Wool, Avishai},
  booktitle={Security and Privacy for Emerging Areas in Communications Networks, 2005. SecureComm 2005. First International Conference on},
  pages={47--58},
  year={2005},
  organization={IEEE}
}





@inproceedings{finvzgar2011use,
  title={Use of {NFC} and {QR} code identification in an electronic ticket system for public transport},
  author={Fin{\v{z}}gar, Luka and Trebar, Mira},
  booktitle={Software, Telecommunications and Computer Networks (SoftCOM), 2011 19th International Conference on},
  pages={1--6},
  year={2011},
  organization={IEEE}
}

@inproceedings{tamrakar2011identity,
  title={Identity verification schemes for public transport ticketing with {NFC} phones},
  author={Tamrakar, Sandeep and Ekberg, Jan-Erik and Asokan, N},
  booktitle={Proceedings of the sixth ACM workshop on Scalable trusted computing},
  pages={37--48},
  year={2011},
  organization={ACM}
}

@article{weinstein2005rfid,
  title={{RFID}: a technical overview and its application to the enterprise},
  author={Weinstein, Ron},
  journal={IT professional},
  volume={7},
  number={3},
  pages={27--33},
  year={2005},
  publisher={IEEE}
}

@article{roberts2006radio,
  title={Radio frequency identification ({RFID})},
  author={Roberts, Chris M},
  journal={Computers \& security},
  volume={25},
  number={1},
  pages={18--26},
  year={2006},
  publisher={Elsevier}
}

@inproceedings{brown2013evaluating,
  title={Evaluating the eavesdropping range of varying magnetic field strengths in NFC standards},
  author={Brown, Tim WC and Diakos, Thomas and Briffa, Johann A},
  booktitle={Antennas and Propagation (EuCAP), 2013 7th European Conference on},
  pages={3525--3528},
  year={2013},
  organization={IEEE}
}

@article{krawczyk1997hmac,
  title={HMAC: Keyed-hashing for message authentication},
  author={Krawczyk, Hugo and Canetti, Ran and Bellare, Mihir},
  year={1997}
}