Digital Forensics in Small Devices: RFID Tag Investigation

collected digital evidence files (before
and after analysis) was performed
(Appendix 22).
The significant findings after analysis
of each entity of RFID BS were
presented (arguments for in Table 5.1)
in order to prove the theft of SI in RFID
based stock management system.
Hence, the forensic examination of a
compromised RFID stock management
system in a retail sector (the research
experiment in the laboratory) was
accomplished.
SUMMARY:
In order to perform the complete and accurate forensic examination of a
compromised RFID stock management system in a retail sector; the forensic
investigator had prepared the tools required for acquisition, got an authorized
administrator login of the compromised system, secured the crime scene,
identified and acquired the potential evidence. Then, the investigator did analyse
the acquired evidence by using the forensic analysis tools in a forensically sound
manner. After performing the forensic examination, as stated in the summary of
Table 5.5; the attack event (theft of SI) was able to prove with the finding results.
The limitations such as interviewing human participants, securing and
transporting the acquired evidence safely, chain of custody, CCTV analysis were
not performed in the research experiment. However, the arguments made for and
against prove the hypotheses (1, 2, 3, 4, 5, 6, 8 and 9) are to be accepted and
hypothesis 7 is to be indeterminate.
142