Thornton / Lanthem RFID Security

1. Auflage 2006
ISBN: 978-0-08-048965-0
Verlag: Elsevier Science & Techn.
Format: PDF
Kopierschutz: 1 - PDF Watermark

E-Book, Englisch, 448 Seiten, Web PDF

RFID is a method of remotely storing and receiving data using devices called RFID tags. RFID tags can be small adhesive stickers containing antennas that receive and respond to transmissions from RFID transmitters. RFID tags are used to identify and track everything from food, dogs, beer kegs to library books.

RFID tags use a standard that has already been hacked by several researchers. RFID Security discusses the motives for someone wanting to hack an RFID system and shows how to protect systems.

Coverage includes: security breaches for monetary gain (hacking a shops RFID system would allow a hacker to lower the pricing on any product products). How to protect the supply chain (malicous/mischievous hackers can delete/alter/modify all identifying information for an entire shipment of products). How to protect personal privacy (privacy advocates fear that RFID tags embedded in products, which continue to transmit information after leaving a store, will be used to track consumer habits).

The purpose of an RFID system is to enable data to be transmitted by a portable device, called a tag, which is read by an RFID reader and processed according to the needs of a particular application. The data transmitted by the tag may provide identification or location information, or specifics about the product tagged, such as price, colour, date of purchase, etc. .

* Deloitte & Touche expects over 10 billion RFID tags to be in circulation by the end of 2005
* Parties debating the security issue of RFID need information on the pros and cons of the technology and this is that information
* Little competition in a market desperate for information

Autoren/Hrsg.

Thornton, Frank

Lanthem, Chris

Inhaltsverzeichnis

1;Cover;1
2;Contents;13
3;Part I: Overview;23
3.1;Chapter 1: What Is RFID?;25
3.1.1;Introduction;26
3.1.2;What This Book Is and Is Not;27
3.1.3;RFID Radio Basics;31
3.1.4;Why Use RFID?;33
3.1.5;RFID Architecture;35
3.1.6;Data Communications;39
3.1.7;Physical Form Factor (Tag Container);43
3.1.8;Summary;49
3.1.9;Links to Sites;49
3.2;Chapter 2: RFID Uses;51
3.2.1;Introduction;52
3.2.2;Applied Use;55
3.2.3;Standards in the Marketplace;60
3.2.4;Failures in the Marketplace;62
3.2.5;RFID for the Consumer: Case Studies;66
3.2.6;Summary;76
3.2.7;References;76
4;Part II: Attacking RFID;77
4.1;Chapter 3: Threat and Target Identification;79
4.1.1;Introduction;80
4.1.2;Attack Objectives;80
4.1.3;Blended Attacks;87
4.2;Chapter 4: RFID Attacks: Tag Encoding Attacks;89
4.2.1;Introduction;90
4.2.2;Case Study: Johns Hopkins vs. SpeedPass;90
4.2.3;The SpeedPass;91
4.2.4;Summary;104
4.3;Chapter 5: RFID Attacks: Tag Application Attacks;105
4.3.1;MIM;106
4.3.2;Chip Clones—Fraud and Theft;106
4.3.3;Tracking: Passports/Clothing;112
4.3.4;Chip Cloning > Fraud;118
4.3.5;Disruption;120
4.3.6;Summary;121
4.4;Chapter 6: RFID Attacks: Securing Communications Using RFID Middleware;123
4.4.1;RFID Middleware Introduction;124
4.4.2;Understanding Security Fundamentals and Principles of Protection;144
4.4.3;Addressing Common Risks and Threats;159
4.4.4;Securing RFID Data Using Middleware;163
4.4.5;Using DES in RFID Middleware for Robust Encryption;165
4.4.6;Using Stateful Inspection in the Application Layer Gateway For Monitoring RFID Data Streams;167
4.4.7;Providing Bulletproof Security Using Discovery, Resolution, and Trust Services in AdaptLink™;170
4.4.8;Summary;173
4.5;Chapter 7: RFID Security: Attacking the Backend;175
4.5.1;Introduction;176
4.5.2;Overview of Backend Systems;176
4.5.3;Virus Attacks;182
4.5.4;RFID Data Collection Tool— Backend Communication Attacks;184
4.5.5;Attacks on ONS;185
4.5.6;Summary;188
5;Part III: Defending RFID;189
5.1;Chapter 8: ;Management of RFID Security;191
5.1.1;Introduction;192
5.1.2;Risk and Vulnerability Assessment;192
5.1.3;Risk Management;195
5.1.4;Threat Management;198
5.1.5;Summary;201
5.2;Chapter 9: Case Study: Using Commerce Events’ AdaptLink™ to Secure the DoD Supply Network— Leveraging the DoD RFID Mandate;203
5.2.1;Background on the Use of RFID in the DoD Supply Chain;204
5.2.2;Improved Asset Tracking for the DoD Is Critical;208
5.2.3;A Proposed Solution in Silent Commerce;212
5.2.4;References;241
5.2.5;Summary;242
6;Appendix A: Additional RFID Reference Material;243
6.1;Frequently Asked Questions;244
6.2;RFID Solutions Fast Track;247
7;Index;251
8;Techno Security Registration;266