IBM researchers have come up with a small device they like to call “security on a stick” for use in online banking so customers plugging into any computer can protect transactions and find out if Trojan malware is trying to steal funds.