Digital Forensics in Small Devices: RFID Tag Investigation

3.2.1 Review of Similar Works Leading towards the Research Methodology
Seven reviews of similar works were described in Section 3.1. The study conducted
by Cerrudo (2003) did was not only to make the security professionals aware that a
potential SQL injection attack could have a critical effect on a business organization,
but also to give recommendations on how to prevent the malicious attacker‟s
manipulations of data in the backend databases and other applications on the network.
Likewise, the research performed by Rieback et al., (2006b) was to warn the
middleware designers that a RFID tag could be used as an attack vector to exploit
backend database servers in order to change the contents of the databases.
Hence, the articles written by Cerrudo (2003) in Section 3.1.1 and Rieback et
al., (2006b) in Section 3.1.2 give an idea of the type of data manipulation attack by
using RFID tag towards the backend database server of a RFID stock management
system (Section 2.3) of a Business System (BS). Therefore, the case of a BS being
violated by a SQL injection attack through the Read/Write RFID Tag (Section 3.3.2)
will be replicated (Rieback et al., 2006b). Even though the attack case scenario of the
research will be replicated, the data requirement in this attack scenario (Section 3.3)
will be completely different from previous literature. For instance, the system design
(Section 3.3.1) of the research is not the same as that of the system mentioned in
previous literature and the middleware software has to be developed (according to the
research requirement) by using Software Development Kit (SDK) provided by the
company that manufactures the RFID scanner. Furthermore, it is important to
acknowledge that none of the researchers (Cerrudo, 2003; Rieback et al., 2006b)
discussed that the potential for a breach of asset protection could be high and hence
would increase the requirement for forensic readiness in any RFID BS. Most
importantly, there was no forensic analysis of the RFID BS in the previous literature.
One of the objectives of the research phases (Figure 3.8 in Section 3.2.5) is to
create a prototype of a commercial retail environment using a RFID stock
management system within the laboratory (see Section 3.3.1, in which a Microsoft
SQL Server 2005 will be utilized as a backend database server). Subsequently, the
BS will be stressed by a SQL injection attack in order to change/manipulate the data
from the backend server and then each entity in the BS (Table 2.5 in Section 2.3) will
57