@inproceedings {24235,
	title = {Robbing Banks with Their Own software{\textemdash}an Exploit against Norwegian Online Banks},
	journal = {23rd International Information Security Conference (SEC 2008)},
	volume = {Volume 278 of the series IFIP {\textendash} The International Federation for Information Processing },
	year = {2008},
	pages = {63-77},
	publisher = {Springer},
	abstract = {The banking industry in Norway has developed a new security infrastruc- ture for conducting commerce on the Internet. The initiative, called BankID, aims to become a national ID infrastructure supporting services such as authentication and digital signatures for the entire Norwegian population. This paper describes a man-in-the-middle vulnerability in online banking applications using BankID. An exploit has been implemented and successfully run against two randomly chosen online banking systems to demonstrate the seriousness of the attack.},
	author = {Espelid, Y. and Netland, L.-H. and Klingsheim, A.N. and Kjell J{\o}rgen {Hole}}
}
