Digital Forensics in Small Devices: RFID Tag Investigation

firstly affect the back-end RFID middleware system and then the virus will later be
spreading within the corporate RFID system.
Thus, the writers or designers of the RFID middleware must carefully design
and build the middleware by performing appropriate checks (bounds checking,
special character filtering and the like) in order to avoid “RFID middleware from
suffering all of the well-known vulnerabilities experienced by the Internet” (Rieback
et al., 2006b, p. 169).
3.1.3 SQL Server Forensics
In this book chapter, Fowler (2009) discuses what SQL Server forensics is, and how
to investigate the incidents relating to SQL Server data. The author also mentions the
differences between the traditional forensics and SQL Server forensics. Furthermore,
the method used in SQL Server forensics is used to identify whether the security of a
database is breached or supplementary investigation is needed to confirm a breach.
Firstly, Fowler (2009) explains that the digital forensics field is very new and
it started getting industry attention in 2001. Since 2001 until now, the digital
forensics field has rapidly been growing due to groups such as the Digital Forensic
Research Workshop (DFRWS), and a number of conferences such as the Black Hat
USA conferences and the like. Then, he states that the problems of security breaches
of data are not an uncommon theme in current news. As a result of companies trying
to cut costs by consolidating databases onto a smaller amount of database servers, it
leads single sources of confidential information to become the primary targets for
malicious attackers. Hence, “75% of cyber attacks are application based and many
involve the theft of personal or financial information stored within a database,
according to the Gartner Group” (Fowler, 2009, p. 48). He gives the examples of
recent data breaches such as the CardSystems which involved the theft of 200,000
credit card details and TJ Maxx which entails the leak of 45.7 million credit and debit
account details. Moreover, in order to help the protection of sensitive data, Fowler
(2009) points to the legislation and regulations dealing with data breach issues. For
instance, the Payment Card Industry (PCI) necessitates organizations to employ
control actions towards sensitive data and Senate Bill 1386 (SB – 1386, commonly
known as “The California Security Breach Information Act”) forces companies to
40