An Enumeration of RFID Related Threats

In this paper we present a holistic view on RFID security using logical entities that most RFID applications will use. Starting from an abstract model of anRFID-system we propose a generalized threat model for RFID-systems based on the classical terms of information security: confidentiality, availability and integrity. We use the method of attack trees for a listing of threats that apply to RFID-systems. The key benefitis that this threat model enables a systematic analysis of a specific RFID-system's security and it allows to compare the security of RFID-systems. By analyzing this threat listing we show that all parts of an RFID Systemare vulnerable to attacks and a single weakpoint in the system can breach information security.