Archive, Volume 1: conference talks and papers on security and risk, 2010 to 2018. Zola 2010-04-01T00:00:00+00:00 https://blog.itys.net/vol1/tags/rfid-security/atom.xml 2010-04-01T00:00:00+00:00 2010-04-01T00:00:00+00:00 Unknown https://blog.itys.net/vol1/posts/iso-focus-plus/ <p>The attached article examines the explosive adoption of radio-frequency identification (RFID) technology across industries and the emerging security concerns that threaten its continued growth. As organizationsfrom the U.S. Department of Defense to livestock ranchers and healthcare providersincreasingly rely on RFID for tracking assets, the industry must confront vulnerabilities that could undermine both privacy and trust in this pervasive technology.</p> <h2 id="attacks">Attacks</h2> <p>In the face of demonstrated attackssuch as drive-by cloning of passport tagsRFID systems are exposed to a spectrum of threats at multiple points: the tag itself, the reader (interrogator), and the air interface. Common attack vectors include mimicking (spoofing, cloning, malicious code), information gathering (skimming, eavesdropping, data tampering), and denial-of-service tactics (reader jamming, tag blocking or killing). Each of these can compromise confidentiality, integrity, or availability, potentially disrupting business operations and eroding user confidence.</p> <h3 id="defense">Defense</h3> <p>To address these challenges, international standards bodies have moved to embed security into RFID deployments. ISO/IEC TR 24729-4 lays out guidelines for tag data securitycovering encryption, authentication, and secure data transmissionwhile balancing cost, storage constraints, and read-performance requirements. The report recommends leveraging a suite of countermeasures (e.g., unique tag identifiers per ISO 15963, password protection, and cryptographic controls) and employs the OWASP DREAD model to assess and prioritize risks. Ongoing work by ISO/IEC SC 31s WG 7 seeks to harmonize these efforts into a coherent framework that ensures interoperability, efficiency, and privacy as RFID becomes ever more ubiquitous.</p> <h3 id="presentation">Presentation</h3> <p><a href="/attachments/55287_2010-04-01_Plugging_Security_Gaps-ISOFP.pdf">ISO Focus+ April 2010</a></p>