Digital Forensics in Small Devices: RFID Tag Investigation

xiv
List of Figures
Figure 2.1 Block diagram of typical RFID system .......................................................... 11
Figure 2.2 How does RFID work? ................................................................................... 11
Figure 2.3 RFID Tags ...................................................................................................... 12
Figure 2.4 Basic Components of RFID Tag .................................................................... 12
Figure 2.5 Handheld RFID reader ................................................................................... 15
Figure 2.6 RFID reader structure ..................................................................................... 16
Figure 2.7 EPCglobal Standards Overview ..................................................................... 18
Figure 2.8 The Data Protocol standards of ISO/IEC 15961,ISO/IEC 15962 and the Air
Interface standards of ISO/IEC 18000 ........................................................... 20
Figure 2.9 RFID technology standards and frequency bands .......................................... 21
Figure 2.10 Memory layout of EPC Gen 2 Tag ............................................................... 23
Figure 2.11 Data transfer techniques between RFID Tad and Reader ............................. 24
Figure 2.12 Enterprise sub-system in RFID system architecture ..................................... 26
Figure 2.13 Information Functions of RFID Middleware Software ................................ 27
Figure 2.14 Classification of RFID Threats ..................................................................... 33
Figure 2.15 Business System RFID Security Risks ......................................................... 34
Figure 3.1: RFID Malware Test Platform ........................................................................ 39
Figure 3.2: Scenario 1 illustration .................................................................................... 42
Figure 3.3: Scenario 2 illustration .................................................................................... 43
Figure 3.4: SQL Server forensic methodology ................................................................ 45
Figure 3.5: Model of Computer Live Forensics Based on Physical Memory Analysis .... 51
Figure 3.6: Digital Forensics Investigation Fundamentals .............................................. 53
Figure 3.7: Process flow between the roles in digital forensics investigation ................. 55
Figure 3.8: Research Phases ............................................................................................ 65
Figure 3.9: Data Map ....................................................................................................... 68
Figure 3.10: The Business System Entity Composition .................................................. 69
Figure 3.11: Test-Station Setup ....................................................................................... 70
Figure 3.12: An Example of Using the Trusted md5deep Hashing Algorithm
for Preservation ............................................................................................ 75
Figure 4.1: Error encountered during the tag was read by RIFD scanner ........................ 84
Figure 4.2: Error encountered during Tripwire for Servers set up ................................... 84