Home > Ask the Security Experts > Security Management Questions & Answers > How can organizations secure implanted microchips and RFID tags?
Ask The Security Expert: Questions & Answers
EMAIL THIS

How can organizations secure implanted microchips and RFID tags?

Mike Rothman EXPERT RESPONSE FROM: Mike Rothman

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 05 June 2008
I have heard a lot of discussion lately about implanted microchips and RFID tags. How can organizations secure these tracking technologies, what are the advantages of using these devices from a security standpoint and what dangers do they pose?

>
EXPERT RESPONSE
RFID tags and RFID implants are totally different animals. RFID tags are becoming commonplace in warehouse and other high-volume tracking use cases where it's important to find something in a large environment. These applications are like any other application: make sure access to the application is governed and the data stored by the application is protected.

In terms of advantages, RFID tags provide a level of granularity in tracking items that hasn't been economically feasible before. The tags are revolutionizing inventory management, and that's a good thing. From a security standpoint, it's possible to use tags to track assets, which could provide more control over where employees take company-owned devices, but that assumes there are RFID readers everywhere an employee would be.

There are also physical security use cases of RFID tags. For example, they could replace the well-worn proximity card readers that most buildings employ. I'm not sure of the economic benefits, but it's certainly a possible use case.

RFID implants have similar application security requirements as tags, but the privacy issues are a totally different ballgame. If medical records are linked to the RFID implant, there are serious HIPAA mandates to protect that information.

As the technology evolves, I believe that human RFID implants could become a slippery slope toward a Big Brother environment. Right now, to my knowledge, there are no GPS-enabled RFID implants -- at least of the variety that could be tracked anywhere in the world -- but eventually they will become reality. Then the question becomes more about ethics than security.

More information:


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Security Management
What is the GISP certification and how does it compare to the CISSP certification?
Would QSAs normally write up a PCI DSS report on compliance (ROC) and submit it to all issuing card brands?
How can gap analysis be applied to the security system development life cycle?
When should an enterprise consider low-cost security appliances vs. a bigger do-everything appliance?
What are some tips on protecting my security budget in a tight economy?
What value do research firms provide to enterprises that subscribe to their services?
What certificate offers the best ROI for an IT project manager?
Which is the biggest threat to data: Insider activity or outsider activity?
What role does information security play in enterprise fraud-prevention activities?
What is the difference between an SAS 70 data center and a Tier III data center?

Device Security Policy
What are the options for a mechanical (not electrical) door security system on a server room door?
Finding lost notebooks with 'LoJack for laptops'
iPhone security in the enterprise: Mitigating the risks
VMworld: Desktop virtualization drives security skepticism
Blogging on corporate laptops is risky business
Will disabling thumb drives also affect the use of the keyboard and mouse?
Are USB storage devices a serious enterprise risk?
Wireless security: IT pros warily watching mobile phone threats
Controlling U3 smart drive use in the enterprise
Pod slurping: The latest data threat
Device Security Policy Research

Security News Makers
Security 7 Award winners tackle important information security issues
Information security professionals have their say
Bruce Schenier, Marcus Ranum debate risk management
Interview: Chris Nickerson of TruTV's 'Tiger Team'
Hardware security guru, Defcon badge maker films TV show
Botnets mailing list revived by security researcher
How to patch Kaminsky's DNS vulnerability
Hoffman to demonstrate new hacking techniques
DNS flaw handling leaves Kaminsky pleased
Valuable lesson emerges from DNS flaw handling

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Palladium  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
Targeted Security Channel Tips for Resellers, Integrators and Consultants
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts