A RESEARCH SURVEY: RFID SECURITY & PRIVACY ISSUE <s> SECURITY & PRIVACY RISK <s> NFC is a standardised technology providing short-range RFID communication channels for mobile devices. Peer-to-peer applications for mobile devices are receiving increased interest and in some cases these services are relying on NFC communication. It has been suggested that NFC systems are particularly vulnerable to relay attacks, and that the attacker's proxy devices could even be implemented using off-the-shelf NFC-enabled devices. This paper describes how a relay attack can be implemented against systems using legitimate peer-to-peer NFC communication by developing and installing suitable MIDlets on the attacker's own NFC-enabled mobile phones. The attack does not need to access secure program memory nor use any code signing, and can use publicly available APIs. We go on to discuss how relay attack countermeasures using device location could be used in the mobile environment. These countermeasures could also be applied to prevent relay attacks on contactless applications using 'passive' NFC on mobile phones. <s> BIB001 </s> A RESEARCH SURVEY: RFID SECURITY & PRIVACY ISSUE <s> SECURITY & PRIVACY RISK <s> Recently, new families of wireless ad hoc networks have emerged for specialized applications--- personal area networks. Wireless personal area networks (WPAN) is rapidly gaining popularity. A wide variety of traditional computing devices and embedded Internet appliances are networked around us. However, due to the broadcast nature of these networks and the heterogeneity of devices on these networks, new security problems will arise, because the different types of devices have different capabilities and security requirements. In this paper, an overview of security issues like attacks and its countermeasures for wireless personal area networks such as Bluetooth, RFID and wireless sensor networks has been provided. <s> BIB002
Widespread RFID deployment creates privacy risks for everyone. In this case, a reader would periodically broadcast a query and all the reader in the vicinity will respond to that reader. The reader will then forward these responses to the database. For instance, an unauthorized user can use the reader or buy another to communicate directly with the tag. So, RFID data can easily be attacked. There are various attacks like sniffing, tracking, spoofing, replay BIB001 and Denial of service cause security and privacy risk for RFID technology BIB002 .