Elektrotechnik und Informatik SMS-based One-Time Passwords : Attacks and Defense