Digital Forensics in Small Devices: RFID Tag Investigation

Appendix 16: Documentation of the SQL Poisoning Attack
(An Example of a Pilot Experiment)
Step 1: After stabilizing the RFID Business System (as stated in Appendix 7), the
fake RFID tag was injected with malicious code.
Figure A16.1: Writing the malicious code into the fake tag, successful!
Step 2: The genuine tag data was scanned a few times before the attack was
initiated. Hence the values of all the products were $1000, as shown in the figure
below.
Figure A16.2: Scanning the genuine RFID tag
194