Digital Forensics in Small Devices: RFID Tag Investigation

5.0 INTRODUCTION
Chapter 5 -
Research Discussion
In Chapter 4, the findings from the research experiment were reported. The
changes made on the proposed data requirements (see Section 3.3), referred to as
variations encountered, during the experiment were described in Section 4.1.
After performing a number of pilot tests on every phase of the research (for
instance; see Appendix 16 for pilot experiment on SQL poisoning attack), the
final experiment was conducted in order to answer the selected research questions
according to the research methodology developed in Chapter 3.
The significant findings from the research experiment conducted include
the malicious SQL poisoning code, a malicious tag’s ID, timestamp when the
attack occurred, and the values of the current stock items in the backend SQL
Server. Moreover, the hash values of all the collected evidence before and after
the analysis (see Appendix 22) were exactly the same. Thus the preservation and
integrity of the evidence were maintained during the experiment. The purpose of a
research methodology and then conducting the forensic investigation was to
investigate the theft of stock item (SI) in a RFID based retail shop. The findings
after the forensic examination were able to prove the theft of SI in a simulated
RFID based stock management system.
Therefore, Chapter 5 will discuss the findings of the research (Section 4.1)
in order to evaluate the importance of the results. The finding results evaluation
will be discussed in association with the discipline area. In addition, the developed
research questions stated in Section 3.2.6 will be answered and discussed in
relation to the asserted hypotheses (Section 3.2.7) in Section 5.1. The discussion
summaries will be described according to the evidential arguments made, for and
against. Subsequently, the discussion of the findings of the research experiment
will be presented in Section 5.2 in order to comprehensively evaluate the reported
outcomes. Then the recommendations (Section 5.3) will be drawn according to
128