@article{13691, keywords = {automatic teller machines, message authentication}, author = {Kjell Hole and V. Moen and A.N. Klingsheim and K.M. Tande}, title = {Lessons from the Norwegian ATM System}, abstract = {This case study focuses on real-world ATM card misuse, illustrating how too much secrecy led to a deterioration of PIN-based authentication procedures, and why a bank{\textquoteright}s refusal to share technical information is a threat to customers during a conflict.}, year = {2007}, journal = {IEEE Security \& Privacy}, volume = {5}, pages = {25-31}, publisher = {IEEE}, doi = {10.1109/MSP.2007.168}, }