Computer Viruses on RFIDs, Fact or Fiction?   3/17/2006 - 1,110 views, 1 Comment

The paper, written by three computer science researchers with Amsterdam’s Free University, detailed how the three researchers had successfully infected RFID chips with a computer virus, and had made the RFID chips a vector for that virus, meaning that they were able to pass the virus from the RFID chip to other computers.

“Everyone working on RFID technology has tacitly assumed that the mere act of scanning an RFID tag cannot modify back-end software and certainly not in a malicious way. Unfortunately, they are wrong,” explained the paper.

Following their presentation, news outlets around the world reported about the threat of computer viruses spread by RFID, and experts chimed in.

“RFIDs with embedded computers are susceptible to basically all the same threats any other computers are. Unfortunately,” observed Mikko Hypponen of security firm F-Secure.

But not everybody thinks that this is a likely risk. For example, Ray Wagner, of the Gartner Group, says that “The likelihood of something like this occurring is extremely low at this point. I don’t expect some kind of RFID virus to appear in the wild anytime soon.”

However, it is not only possible, but, it seems, probably. It seems like the only question remaining is not “if”, but “when?”

The bottom line here, then, is that those who manufacture RFIDs should be thinking about building in some security (presently there is nothing such as a “secure RFID chip”), and sooner would be better.