An RFID Attacker Behavior Taxonomy

Mirowski, Luke; Hartnett, JS; Williams, RN

doi:10.1109/mprv.2009.68

Cited by 21 publications

(10 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In order to extend this work and capture threats related to technical, physical and social engineering, we did a more thorough analysis of the conceptual design of the RFID-based goods management system, the physical layout of the warehouse where it is deployed and how people are involved in the work processes. We also made use of other relevant attack trees, such as Mirowski et al [Mirowski et al, 2009], to supplement the creation.…”

Section: An Rfid-based Goods Management Systemmentioning

confidence: 99%

Attribute Decoration of Attack–Defense Trees

Bagnato

Kordy

Meland

et al. 2012

International Journal of Secure Software Engineering

View full text Add to dashboard Cite

Attack-defense trees can be used as part of threat and risk analysis for system development and maintenance. They are an extension of attack trees with defense measures. Moreover, tree nodes can be decorated with attributes, such as probability, impact and penalty, to increase the expressiveness of the model. Attribute values are typically assigned based on cognitive estimations and historically recorded events. This paper presents a practical case study with attack-defense trees. First, we create an attack-defense tree for an RFID-based goods management system for a warehouse. Then, we explore how to use a rich set of attributes for attack and defense nodes and how to assign and aggregate values to obtain condensed information, such as performance indicators or other key security figures. We discuss different modeling choices and trade-offs. The case study led us to define concrete guidelines that can be used by software developers, security analysts and system owners when performing similar assessments.

show abstract

Section: An Rfid-based Goods Management Systemmentioning

confidence: 99%

Attribute Decoration of Attack–Defense Trees

Bagnato

Kordy

Meland

et al. 2012

International Journal of Secure Software Engineering

View full text Add to dashboard Cite

show abstract

“…data reliability, read rate in critical conditions, lack of unified standard for interoperability), (ii) software weakness (Barchetti et al, 2010) (e.g. scalability, single-point of failure, integration with information systems), (iii) relatively high costs of tags, software customization and systems integration, (iv) security issues (Staake et al, 2005;Mirowski et al, 2009), (v) lack of scientific literature on the evaluation of potential effects of RFID exposure on molecular structure and potency of drugs (Acierno et al, 2010). There is a rich literature about developing and evaluating UHF RFID solutions.…”

Section: Related Workmentioning

confidence: 99%

High Performance UHF RFID Tags for Item Level Tracing Systems in Critical Supply Chains

Catarinucci¹,

Colella²,

Blasi³

et al. 2011

Current Trends and Challenges in RFID

View full text Add to dashboard Cite

“…(23). Some recent works (27) have focussed on this topic, exploiting diagnostic techniques such as high pressure liquid -Integration and interoperability of EPC network services with the information systems of organizations: EPC network architecture tries to standardize components and interfaces to serve as a basis for RFID-driven business. Currently, only the local components specified in the EPC network architecture are being used (24).…”

Section: Open Issuesmentioning

confidence: 99%