Report: Hackers to Target Web 2.0, Mobile, RFID Technologies in '08
The coming year will see hackers set their sights on users of Web 2.0, mobile and RFID technologies due to the vast potential for financial gain each represents, according to a cybersecurity think tank.
"Security solutions for mobile devices are lagging [behind] what is available for desktops and other platforms. The awareness of vulnerabilities as they get publicized and the need for vigilance in this area will become increasingly important for CIOs and their organizations," Ahamad said. "Enterprises have policies for dealing with information on laptops, and as powerful mobile devices with richer applications become common, such policies will have to address them as well."
RFID Attacks
Radio frequency identification (RFID) technologies wirelessly read and transmit information between sensors with unique IDs at specific, preset frequencies. RFID is by no means new, but analysts and experts predict investments in RFID and related sensor network technologies will rise dramatically in the coming five years, according to GTISC. That means hackers will set their sights on RFID, in hopes of profiting from unsuspecting users.
Currently, various RFID protocols, frequencies and formats can be built into single RFID card readers and tokens, making the technology more accessible and cheaper to use for consumers. But this consolidation also makes it easier for hackers to exploit. The majority of existing security protocols for RFID are limited.
Organizations that employ RFID for access control could fall victim to any of the following exploits, according to GTISC:
- A specific user could be tracked via their RFID card, regardless of whether or not they were attempting access a company building.
- RFID identification numbers can be copied from access cards and distributed to outside parties to gain access to secure facilities.
- A perpetrator could purposely direct a large number of individual access requests, or ID numbers, to card readers to crash the building's entry system—another form of DoS attack.
More information on GTISC or its emerging cyber threats report is available on the group's website.
Hackers



