Browsing by Author "Fernando, H. S"

Now showing 1 - 2 of 2

Embargo
Policy-based SQLIA detection and prevention approach for RFID systems
(North-Holland, 2015-02-01) Abawajy, J; Fernando, H. S
While SQL injection attacks have been plaguing web application systems for years, the possibility of them affecting RFID systems was only identified very recently. However, very little work exists to mitigate this serious security threat to RFID-enabled enterprise systems. In this paper, we propose a policy-based SQLIA detection and prevention method for RFID systems. The proposed technique creates data validation and sanitization policies during content analysis and enforces those policies during runtime monitoring. We tested all possible types of dynamic queries that may be generated in RFID systems with all possible types of attacks that can be mounted on those systems. We present an analysis and evaluation of the proposed approach to demonstrate the effectiveness of the proposed approach in mitigating SQLIA.
Open Access
A Web Based Peer-to-Peer RFID Architecture
(Springer, Cham, 2016-08-18) Fernando, H. S; Mahdin, H
To realize the maximum benefits of RFID technology in large scale distributed environments, the use of an architectural framework which fulfils the specific requirements of those systems is paramount. Unfortunately, the existing frameworks are designed at a high level to allow the development and deployment of a number of fundamentally different systems. Therefore, specialist systems based on this kind of framework will run into a number of issues due to the nature of those applications and their unique needs. In this paper, we present web based P2P architecture for distributed RFID systems specifically targeted at distributed RFID systems. We carry out a comparative analysis of the proposed which shows that our architecture has a number of significant advantages over other existing systems.