A Methodology for Evaluating Security in Commercial RFID Systems
Open accessAbstract
Although RFID has become a widespread technology, the developers of numerous commercial systems have not taken care of security properly. This chapter presents a methodology for detecting common security flaws. The methodology is put in practice using an open-source RFID platform (Proxmark 3), and it is tested in different fields, such as public transportation or animal identification. The results obtained show that the consistent application of the methodology allows researchers to perform security audits easily and detect, mitigate, or avoid risks and possible attacks.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
This is essential in critical infrastructures and defense, whose data have to be stored through trusted service providers, especially in countries where data privacy and security are not guaranteed.
“This is essential in the case of critical infrastructures [34], [35] and defense [36], whose data, due to legal and privacy concerns (e.g., certain defense data are considered strategic and therefore classified), have to be stored through trusted service providers, especially in countries where data privacy and security are not guaranteed [37].”
From A Review on the Application of Blockchain to the Next Generation of Cybersecure Industry 4.0 Smart Factories (2019) · cites this paper as [35]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars
Francillon, A., Danev, B., & Čapkun, S. (2011) · Repository for Publications and Research Data (ETH Zurich) · doi:10.3929/ethz-a-006708714 · Cited by 350 · see citing works
Classifying RFID attacks and defenses
Mitrokotsa, A., Rieback, M. R., & Tanenbaum, A. S. (2009) · Information Systems Frontiers · doi:10.1007/s10796-009-9210-z · Cited by 233 · see citing works
Garcia, F. D., Gans, G. D. K., Muijrers, R., et al. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-88313-5_7 · Cited by 194 · see citing works
Breaking Mifare DESFire MF3ICD40: Power Analysis and Templates in the Real World
Oswald, D., & Paar, C. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-23951-9_14 · Cited by 141 · see citing works
Wirelessly Pickpocketing a Mifare Classic Card
Garcia, F. D., van Rossum, P., Verdult, R., et al. (2009) · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · doi:10.1109/sp.2009.6 · Cited by 106 · see citing works
Courtois, N. T. (2009) · International Conference on Security and Cryptography · doi:10.5220/0002238003310338 · Cited by 65 · see citing works
The Survey of RFID Attacks and Defenses
Li, H., Chen, Y., & He, Z. (2012) · International Conference on Wireless Communications, Networking and Mobile Computing · doi:10.1109/wicom.2012.6478720 · Cited by 48 · see citing works
Unreconciled Collisions Uncover Cloning Attacks in Anonymous RFID Systems
Bu, K., Liu, X., Luo, J., et al. (2013) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2012.2237395 · Cited by 37 · see citing works
Context-Aware Defenses to RFID Unauthorized Reading and Relay Attacks
Halevi, T., Li, H., Ma, D., et al. (2013) · IEEE Transactions on Emerging Topics in Computing · doi:10.1109/tetc.2013.2290537 · Cited by 25 · see citing works
Enhancing RFID Tag Resistance against Cloning Attack
Abawajy, J. (2009) · International Conference on Network and System Security (NSS) · doi:10.1109/nss.2009.101 · Cited by 25 · see citing works
Semi-passive RFID development platform for implementing and attacking security tags
Feldhofer, M., Aigner, M., Baier, T., et al. (2010) · International Conference for Internet Technology and Secured Transactions · Cited by 21 · see citing works
An effective intrusion detection approach for jamming attacks on RFID systems
Avanço, L., Guelfi, A. E., Pontes, E., et al. (2015) · doi:10.1109/eurfid.2015.7332388 · Cited by 15 · see citing works
A research on Denial of Service attack in passive RFID system
Fu, Y., Zhang, C., & Wang, J. (2010) · International Conference on Anti-counterfeiting, Security, and Identification · doi:10.1109/icasid.2010.5551848 · Cited by 14 · see citing works
RFID malware fragmentation attacks
Suliman, A., Shankarapani, M. K., Mukkamala, S., et al. (2008) · International Symposium on Collaborative Technologies and Systems (CTS) · doi:10.1109/cts.2008.4543975 · Cited by 11 · see citing works
Analysis of the MIFARE Classic used in the OV-Chipkaart project
Gans, G. D. K. (2008) · Cited by 11 · see citing works
RFID: An appraisal of malevolent attacks on RFID security system and its resurgence
Pandian, M. T., & Sukumar, R. (2013) · doi:10.1109/mite.2013.6756297 · Cited by 10 · see citing works
Lim, T.-L., & Li, T. (2008) · IEEE International Symposium on Personal, Indoor and Mobile Radio Communications (PIMRC) · doi:10.1109/pimrc.2008.4699588 · Cited by 6 · see citing works
Implementation of an RFID relay attack countermeasure
Guizani, S. (2015) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2015.7289273 · Cited by 4 · see citing works
Flagged first, then by citations
Research works printed but not linked: 2
- Michael Weiß. Performing relay attacks on ISO 14443 contactless smart cards using NFC mobile equipment [thesis]. 2010.
- F. D. Garcia et al. Dismantling MIFARE card. In: European Symposium on Research in Computer Security; 2008; Torremolinos, Spain.
Cited by
Sorted by citations
A Review on the Use of Blockchain for the Internet of Things
Fernandez-Carames, T. M., & Fraga-Lamas, P. (2018) · IEEE Access · doi:10.1109/access.2018.2842685 · Cited by 1,078 · see citing works
Self-citationFernandez-Carames, T. M., & Fraga-Lamas, P. (2020) · IEEE Access · doi:10.1109/access.2020.2968985 · Cited by 607 · see citing works
Self-citationFernandez-Carames, T. M., & Fraga-Lamas, P. (2019) · IEEE Access · doi:10.1109/access.2019.2908780 · Cited by 321 · see citing works
Self-citationBlanco-Novoa, O., Fernandez-Carames, T. M., Fraga-Lamas, P., & Vilar-Montesinos, M. A. (2018) · IEEE Access · doi:10.1109/access.2018.2802699 · Cited by 183 · see citing works
Self-citationFernández-Caramés, T. M., & Fraga-Lamas, P. (2019) · Applied Sciences · doi:10.3390/app9214479 · Cited by 156 · see citing works
Self-citationSuárez-Albela, M., Fraga-Lamas, P., Castedo, L., & Fernández-Caramés, T. M. (2018) · Sensors · doi:10.3390/s19010015 · Cited by 35 · see citing works
Self-citation
- Authors
- Fernández-Caramés, T. M., Fraga-Lamas, P., Suárez-Albela, M., & Castedo, L.
- Venue
- Radio Frequency Identification
- Publisher
- InTech
- Published
- 2017-11-29
- OpenAlex
- W2772775232
- Cited by
- 28
- References
- 18
- Citations by year
- 2026: 1 · 2025: 3 · 2024: 1 · 2023: 1 · 2022: 3 · 2021: 3 · 2020: 7 · 2019: 4 · 2018: 5
- FWCI
- 13.63
- Type
- book chapter
- Language
- en
- Open access
- hybrid
- doi.org
- Locations
- InTech eBooks (publishedVersion, cc-by)
- BiblioBoard Library Catalog (Open Research Library) (submittedVersion, cc-by)
- Funders
- Ministerio de Economía y Competitividad (TEC2015-69648-REDC, TEC2013-47141-C4-1-R)
- Topics
- Physical Sciences › Engineering › Media Technology › RFID technology advancements
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Keywords
- RFID security, security assessment methodology, RFID attacks
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
