Browse > Article
http://dx.doi.org/10.7236/JIWIT.2012.12.1.83

A Study of Security Weaknesses of QR Codes and Its Countermeasures  

Yang, Hyung-Kyu (Dept. of Computer-Media Engineering, kangnam university)
Publication Information
The Journal of the Institute of Internet, Broadcasting and Communication / v.12, no.1, 2012 , pp. 83-89 More about this Journal
Abstract
Recently, due to widespread use of smartphones, the number of applications of the QR code is increased rapidly. QR codes, a kind of 2-dimensional barcode, is used to encode information such as simple URLs or namecards, especially for corporates' advertisement. Users can get some information easily by taking picture of the target QR code, however, fake or altered QR codes can cause serious problems, e.g., URL hijacking or infringement of private information because no one can identify the buried information in the QR code by his naked eye. In this paper, I summarize threats to the QR code and present how to tackle these threats.
Keywords
Smartphone; QR(Quick Response); Security; Integrity;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Scany, http://www.scany.net/kr/
2 QROOQROO, http://www.qrooqroo.com/viewSupport. do
3 이메일 피싱, http://www2.fnnews.com/view?ra=Sent1201m_View&corp=fnnews&arcid=00000922380713&cDateYear=2011&cDateMonth=08&cDateDay=02
4 Recognizing and Avoiding Email Scams, http://www.us-cert.gov/reading_room/emailscams_0905.pdf, US-CERT, 2011
5 QR Code, http://www.denso-wave.com/qrcode/ko/index.html
6 Information technology - Automatic identification and data capture techniques - Code 128 bar code symbology specification, ISO/IEC 15417:2007, 2007
7 Information technology - Automatic identification and data capture techniques - Bar code verifier conformance specification - Part 1: Linear symbols, ISO/IEC 15426-1:2006, 2006
8 Information technology - Automatic identification and data capture techniques - Bar code symbology -- QR Code, ISO/IEC 18004:2000, 2000
9 Information technology - Automatic identification and data capture techniques - QR Code 2005 bar code symbology specification, ISO/IEC 18004:2006, 2006
10 정보기술－자동인식 및 데이터 획득 기술－바코드 기호 사양－QR 코드, KS X ISO/IEC 18004:2007, 2007