Digital Forensics in Small Devices: RFID Tag Investigation

hypotheses of the research will be based on how the tag data can be compromised by
using a few case scenarios.
Hypothesis 1 (H1): Backend database server can be compromised by a
malicious RFID R/W tag.
Hypothesis 2 (H2): The value of a SI tagged with R/W RFID tag can be
changed.
Hypothesis 3 (H3): There will be transaction traces in the RFID reader
memory after the attack.
Hypothesis 4 (H4): There will be transaction traces in the POS/Server‟s
memory after the attack.
Hypothesis 5 (H5): There will be transaction traces in the SQL Server
transaction logs after the attack.
Hypothesis 6 (H6): There will be transaction traces in the SQL Server
error logs after the attack.
Hypothesis 7 (H7): The malicious tag can be found at the crime scene.
Hypothesis 8 (H8): The significant evidence can be extracted by
analyzing collected data with EnCase forensic software, Windows
Forensic Toolchest, and a hardware write blocker (Tableau Forensic
USB Bridge).
Hypothesis 9 (H9): The MD5 hash values of the collected evidence
before and after analysis are the same. Hence the collected evidence is
credible, reliable, repeatable, and acceptable to the court of law.
67