Digital Forensics in Small Devices: RFID Tag Investigation

(Chapter 5; Section 5.3) for both digital forensic researchers and practitioners.
Like any other research project, this research also has limitations (Chapter 3;
Section 3.4), and opportunities from which future research ideas can be derived.
Thus, the following modifications are suggested toward future research for the
simulated RFID stock management system design (Section 3.3.1). Firstly, the test-
bed system design could be modified by implementing Web Server applications
(for example; Microsoft Internet Information Server), dedicated POS and the
backend SQL Server, surveillance system (CCTV), intrusion detection systems
(IDS), antivirus client (AVC) software, data processing and accounting
applications. Then, the modified RFID BS could be connected to the Internet in
order to perform diverse malicious attack events coming via the Internet by
authorized or unauthorized person. After the attacks, a DFI can be performed on
the modified target RFID BS. Furthermore, after performing DFI procedures, the
additional findings such as the logs from Web Server, IDS, AVC and CCTV,
interviews with human participants, Windows registry, and network devices
would give the forensic examiner a complete and holistic picture of the DFI in a
RFID based retail system. Therefore, the DFI can lead to consistent reporting that
is trustworthy.
158