@article {24196,
	title = {  Risk Assessment of a National Security Infrastructure},
	journal = {IEEE Security \& Privacy},
	volume = {7},
	year = {2009},
	pages = {34-41},
	publisher = {IEEE},
	abstract = {In Norway, BankID is the banking industry{\textquoteright}s public-key infrastructure (PKI) of choice for authenticating Internet customers. But do BanklD{\textquoteright}s differences from standard PKIs make it a riskier choice? This assessment, based on both publicly available information and usage experiences, addresses that question.},
	keywords = {bank data processing, Internet, public key cryptography},
	doi = {10.1109/MSP.2009.17},
	author = {Kjell J{\o}rgen {Hole} and Klingsheim, A.N. and Netland, L.-H. and Espelid, Y. and Tjostheim, T. and Moen, V.}
}
@article {24211,
	title = {Case study: online banking security},
	journal = {IEEE Security \& Privacy},
	volume = {4},
	year = {2006},
	pages = {14-20},
	publisher = {IEEE},
	abstract = {A description of attack scenarios over a two-year period illustrates several key security issues with Internet banking systems in Norway. Given the banks{\textquoteright} security-by-obscurity policy, online customers knew little about security levels and falsely believed their assets were safe.},
	doi = {10.1109/MSP.2006.36},
	author = {Kjell J{\o}rgen {Hole} and Moen, V. and Tjostheim, T.}
}
