Wireless Security.pdf - PDF Archive

634 Chapter 24
Figure 24.10 : E-ZPass high-speed toll plaza–antenna array
24.8 Threat and Target Identification
So far, we have learned how Radio Frequency Identification (RFID) works and how it
is applied in both theory and real-world operations. This chapter discusses how security
is implemented in RFID, and the possible attacks that can occur on RFID systems and
applications.
Before we can analyze possible attacks, we have to identify potential targets.
A target can be an entire system (if the intent is to completely disrupt a business), or it
can be any section of the overall system (from a retail inventory database to an actual
retail item).
Those involved in information technology security tend to concentrate solely on
“ protecting the data. ” When evaluating and implementing security around RFID, it is
important to remember that some physical assets are more important than the actual
data. The data may never be affected, even though the organization could still suffer
tremendous loss.
Consider the following example in the retail sector. If an individual RFID tag was
manipulated so that the price at the Point of Sale (POS) was reduced from $200.00 to
$19.95, the store would suffer a 90 percent loss of the retail price, but with no damage to
the inventory database system. The database was not directly attacked and the data in the
www.newnespress.com