Analysing security risks in computer and radio frequency identification (RFID) networks using attack and protection trees

International Journal of Security and Networks

Volumn 5, Issue 2-3, 2010, Pages 87-95

  Dalton II, George C ^a   Edge, Kenneth S ^b   Mills, Robert F ^a   Raines, Richard A ^a  

^a Air Force Institute of Technology   (United States)

^b AIR FORCE RESEARCH LABORATORY   (United States)

Author keywords

Attack modelling; Attack trees; Computer security; Metrics; Protection modelling; Protection trees; Radio frequency identification (RFID) security; Risk

Indexed keywords

FORESTRY; NETWORK SECURITY; RADIO WAVES; RISK ANALYSIS; RISK ASSESSMENT; RISKS; SECURITY OF DATA;

ANALYSIS CAPABILITIES; ATTACK MODELLING; ATTACK TREE; GOVERNMENT AGENCIES; METRICS; PROTECTION TREES; RADIO FREQUENCY IDENTIFICATION TECHNOLOGY; SECURITY RISKS;

RADIO FREQUENCY IDENTIFICATION (RFID);

EID: 77949692385     PISSN: 17478405     EISSN: 17478413     Source Type: Journal    
DOI: 10.1504/IJSN.2010.032207     Document Type: Article

References (18)

1. Amoroso, E. (1994) Fundamentals of Computer Security Technology, PTR Prentice-Hall, Englewood Cliffs, NJ.
2. Edge, K., Dalton, G., Raines, R. and Mills, R. (2006) 'Using attack and protection trees to analyze threats and defenses to homeland security', Proceedings of 2006 Military Communications Conference (MILCOM 2006), 25-25 October, Washington DC, pp.1-7 (CD).
3. Edge, K., Raines, R., Grimaila, M., Baldwin, R., Bennington, R. and Reuter, C. (2007) 'The use of attack and protection trees to analyze security for an online banking system', Proceeding of 40th Annual Hawaii International Conference on Systems Sciences, Waikoloa, Hawaii, 3-6 January, pp.1-8 (CD).
4. Grunwald, L. (2004) RF-ID and Smart-Labels: Myth, Technology, and Attacks, Blackhat Briefings, 24-29 July, Las Vegas.
5. Karppinen, K. (2005) Security Measurement based on Attack Trees in a Mobile Ad Hoc Network Environment, VTT Publications, Espoo, Vol.580, p.57.
6. Linger, R. and Moore, A. (2001) Foundations for Survivable System Development: Service Traces, Intrusion Traces, and Evaluation Models, Carnegie-Mellon University Software Engineering Institute, Technical Report CMU/ SEI-2001-TR-029 ESC-TR-2001-2029, October.
7. Mauw, S. and Oostdijk, M. (2005) 'Foundations of attack trees', Eighth Annual International Conference on Information Security and Cryptology, LNCS, Seoul, Korea.
8. Meriac, M. and Plotz, H. (2007) Practical RFID Attacks, Chaos Communication Camp, 8-12 August, Finowfurt Germany.
9. Mitrokotsa, A., Rieback, M. and Tanenbaum, A. (2008) 'Classification of RFID attacks', Proceedings of the 2nd International Workshop on RFID Technology - Concepts, Applications, Challenges, IWRT 2008, Barcelona, Spain, June, pp.73-86.
10. Moore, R., Williams, J., Parks, R., Kewley, D., Snyder, D. and Tinnel, L. (2001) 'The information battlespace preparation experiment', Proceedings of DARPA Information Survivability Conference and Exposition II, DISCEX'01, p.0352.
11. Pallos, M. (2004) 'Attack trees: it's a jungle out there - seeing your system through a Hacker's eyes', WebSphere Online Journal, Vol.3, pp.12-14.
12. Prowell, S., Trammell, C., Linger, R. and Poore, J. (1999) Cleanroom Software Engineering: Technology and Process, Addison-Wesley-Longman, Inc., Reading, MA.
13. Schaberreiter, T., Wieser, C., Sanchez, I., Riekki, J. and Roning, J. (2008) 'An enumeration of RFID related threats', International Conference on Mobile Ubiquitous Computing, Systems, Services and Technologies, Valencia, Spain, 29 September-4 October, pp.381-389.
14. Schneier, B. (1999) 'Attack trees: modelling security threats', Dr. Dobb's Journal, Vol.24, pp.21-29.
15. Schneier, B. (2000) Secrets and Lies: Digital Security in a Networked World, John Wiley & Sons, New York.
16. Sheyner, O., Haines, J., Jha, S., Lippmann, R. and Wing, J. (2002) 'Automated generation and analysis of attack graphs', Proceedings of the IEEE Symposium on Security and Privacy, Oakland CA, 12-15 May, pp.273-284.
17. Stadlober, S. (2005) An Evaluation of Security Threats and Countermeasures in Distributed RFID Infrastructures, Master's Thesis, Institute for Information Systems and Computer Media, Graz University of Technology, July.
18. Steffan, J. and Schumacher, M. (2002) 'Collaborative attack modeling', Proceedings of the 2002 ACM symposium on Applied Computing, 11-14 March, Madrid, Spain, pp.253-259.