CSIA300 UMUC Emerging Issues Analysis and Report Research I already have the answer written. I just need someone to paraphrase it. I want to be plagiarism

CSIA300 UMUC Emerging Issues Analysis and Report Research I already have the answer written. I just need someone to paraphrase it. I want to be plagiarism free. Research Report #2: Emerging Issues Analysis and Report
Introduction
Padgett- Beale’s Entertainment Team (ET) is ready to introduce a new cloud based event
management solution that provides end to end management for events like concerts, festivals and
conferences. The head of Marketing & Media (M&M) and the Resort Operations (RO) believes
that the data collection and analysis abilities of the system will prove to be value and even help
with managing other hotel sponsored events like their kids programs. While the ET, RO and
M&M teams are ready to move forward several of the upper level managers have some concerns
about the customized Radio-Frequency Identification (RFID) wrist brands included in the event
management system that is will be used to manage and track attendees. The bands uses unique
identifiers fixed in the band to track attendees every move and is connected to the attendee’s
credit card or debit card account so they can make purchases for food, beverages, and souvenirs
sold at the event. The head of Corporate IT has given approval for the new system because it is
cloud-based and reduces the amount of infrastructure that the IT team has to must support and
manage. However the project has come to a stop since the Chief Privacy Officer (CPO)
requested more information about the advantages of the RFID solution and potential privacy
issues that may occur. The report will provided an analysis of managing adult attendees at music
festivals with RFID bands linked to their twitter, Facebook, and credit/debit accounts and the
security and privacy issues that may arise.
Analysis
One way that the ET plans on using the RFID wrist bands is to manage adult attendees at
music festivals. The RFID bands will be linked to the attendees’ twitter, Facebook, and
credit/debit accounts to make it easy for them to make purchases for food, beverages, and
souvenirs sold at the event. RFID wrist bands will give guest a hands-free experience at the
concert meaning that guest will not have to worry about carry cash, concert tickets or credit cards
and can move around the event carefree. (MyZone Media Inc., 2015) This technology will allow
guest to focus on having a good time which is proven to increase impulse spending on food and
merchandise. (MyZone Media Inc., 2015) The opportunity for theft and fraud is reduced when
guests use the wristband instead of walking around with carrying cash, credit cards that are
known getting lost or stolen during large events. In the case of a stolen RFID wristband, the
RFID system can easily be cancelled and re-issue if necessary.
RFID technology is now able to connect to user’s social media accounts like Facebook,
twitter and Instagram. . (ID&C LLC, 2018) Users can check in on Facebook and post pictures on
Instagram by simply tapping their wristband against an RFID touch-point. (MyZone Media Inc.,
2015) The RFID social media capabilities allows users to share socially with their family and
friends while providing free online advertising for the hotel. (MyZone Media Inc., 2015)
Moreover, the hotel will have the ability to collect intelligent data and analytics about their guest.
The hotel will be able to determine what their guest like by analyzing how they interact and
move around the concert. The wristband will allow collect data on purchases made and can be
used to simplify and improve the guest experiences in the future. (ID&C LLC, 2018)
While the RFID wrist band provide so many benefit for the Padgett-Beale and their ET
there are a few privacy and security issues that need to be addressed:
RFID Sniffing
Padgett-Beale should be concerned about RFID sniffing which is when attackers use their
own RFID readers to steal information on users’ wristbands. (Security Wing, 2015) Most RFID
tags do not know how to differentiate between a request sent by a valid RFID reader and a fake
one which is a major concern regarding guest privacy. (Security Wing, 2015)
Denial of Service
Denial of service attack is and attack that prevents is authorized users from gaining
access to a service. (Security Wing, 2015) During the process of sending and requesting
information from a RFID both the reader and the backend server can be a target for a denial of
service attacks. When these attacks occur the users tag will fail to verify their identity with the
reader and the RFID service gets interrupted. (Security Wing, 2015)
Viruses
Just like many other information technology systems, RFID are prone to virus attacks
which usually targets the backend database that stores all he user’s data. (Security Wing, 2015)
Virus attacks are extremely crippling because they can destroy and expose valuable data and
disrupt service.
Tracking
Access to the RFID tag will allow an attacker to track the location and activity of its
users. Users should be aware of the fact that if a hacker gain access to the network and pin point
their exact location and communication between the tag and the RFID readers. (Security Wing,
2015)
Counterfeit RFID
Counterfeit RFID tags pose a serious threat to the organization as attackers can easily
make fake basic RFID tags. Basic RFID tag do not use encryption so hackers can write
information onto basic tags to gain access to the network. (Security Wing, 2015) Once the
hackers are into the system they can use the fake RFID tag to modify data in the system like
lowering prices of items to make purchases, gain access to exclusive deals or areas that are only
open to certain groups of people like VIP rooms or backstage passes. (Security Wing, 2015)
They can also attach their fake tag to another users tag and use their valuable data like
credit/debit card numbers to make purchases or gain access to events.
Protection by law
Depending on what state you live in there are not many laws in place that could impact
the planned implementation of the event management system with RFID wrist bands. The
Federal Trade Commission (FTC) governs RFIDs and has taken little to no enforcement actions
but some states have started to establish guideline for the use of RFID by businesses. (Brulia,
Buczynski, Heinrich, & Jung, 2009) Some of the basic laws require business to label those
products containing tags and provide information on how to disable and remove tag and require
businesses to inform consumers when RFID readers are nearby. (Brulia, Buczynski, Heinrich, &
Jung, 2009) Some state required that the organization tells users exactly how the information in a
RFID tag will be used and require fair and lawful processing of personal data and limit how long
that data can be stored. Currently, there are not laws put in place to protect users in Maryland
when it comes to RFID tag. (Brulia, Buczynski, Heinrich, & Jung, 2009) However, as RFID
become more mainstream Padgett-Beale should be ready for the risk of future legislation as more
people become interested protecting their privacy while using the tags.
Recommendations
The following are a list of best practices for security and privacy that should be implemented
before the technology is put into use by Padgett-Beale.
Data Encryption
Cryptography is another great tool to ensure data integrity as it can confirm whether or
whether not data was last created, sent, modified or stored by an authorized user. (Tutorials
Point, 2018) It is important for an organization to maintain the integrity of sensitive information
by keeping it untouched by unauthorized users. It is important to make sure the company uses
RFID tags with cryptography when you are dealing with sensitive information. If you have to use
basic tag, make sure you have proper security measures, monitoring and audit program in place
to detect any anomalies in your RFID system.
Consumer Transparency
The use of RFID tag should not be kept as a secret from the guest. (ID&C LLC, 2018)
The guest should be aware of the RFID tags and how their information will be used and stored.
(ID&C LLC, 2018) Consumers should know that their data is being recorded and used for
whatever reason by the company to help alleviate some of their privacy concerns.
Security
Padgett-Beale should have the appropriate cybersecurity measure in place to secure the
RFID tags and readers to protect them from unauthorized reading and tracking. (Center for
Democracy & Technology, 2008) In addition, they should implement a security measure to
secure the linked information like social media accounts from unauthorized access. (Center for
Democracy & Technology, 2008) Establishing and maintaining a strong information security
program will mitigate the internal and external risks to the integrity of information stored on
RFID tags.
Establish a Privacy Policy
The implementation of a privacy policy will determine how the RFID system will store
and manage consumer’s confidential information. (Karygiannis, et al., 2007) There should some
sort of data sharing and data collection limitation to ease the consumer’s mind make the use of
RFID tags more appealing. A privacy policy should be in place before RFID system can
determine the appropriate security measure to implement. (Karygiannis, et al., 2007)
Security and Privacy Training Program
It is important that all the operators of the RFID system participate in security and
privacy training program before operating the system. Risks are best mitigated when the
personnel is aware of the risks and the associated consequences. (Karygiannis, et al., 2007) The
training program should cover the RFID privacy policy and teach operator how to properly use
the system and the appropriate security measures. (Karygiannis, et al., 2007)
Conclusion
Overall, RFID technologies contains many sub-grouping with unique abilities and
various capabilities involving keeping track of objects, people, and to providing services needed
to manage large events. Broadly speaking, RFID technology can be used for several purposes
and is a valuable tool for event management as it will allow Padgett-Beale to streamline
operations by providing convenient purchasing power, increasing social media present and offers
reporting tools that provide application data and analytics. With all new technology comes risk
that need to be mitigated but following the NIST guidelines for securing RFID systems will
allow this exciting new technology to reach its full potential.
References
Brulia, V., Buczynski, J., Heinrich, A., & Jung, D. (2009). Privacy & RFID Technology – Legal
Issues. Retrieved August 5, 2018, from http://www.personal.psu.edu/users/v/j/vjb5014/legal.html
Center for Democracy & Technology. (2008, November 30). Privacy Best Practices for
Deployment of RFID Technology. Retrieved August 5, 2018, from
https://cdt.org/insight/privacy-best-practices-for-deployment-of-rfid-technology/
ID&C LLC. (2018, June 01). 8 Benefits of Using RFID Wristbands for Resorts & Attractions.
Retrieved August 5, 2018, from https://www.idcband.com/en-us/blog-us/8-benefits-of-usingrfid-wristbands-resorts-attractions/
Karygiannis, T., Eydt, B., Barber, G., Bunn, L., Phillips, T., & NIST. (2007, April). SP 800-98,
Guidelines for Securing Radio Frequency Identification (RFID) Systems. Retrieved August 5,
2018, from https://csrc.nist.gov/publications/detail/sp/800-98/final
MyZone Media Inc. (2015, April 09). The Scoop on RFID Wristbands and Cashless Ticketing.
Retrieved August 5, 2018, from https://myzone.com/scoop-rfid-wristbands-cashless-ticketing/
Security Wing. (2015, February 12). Top 10 RFID Security Concerns and Threats. Retrieved
August 5, 2018, from https://securitywing.com/top-10-rfid-security-concerns-threats/
Tutorials Point. (2018, January 08). Modern Cryptography. Retrieved June 9, 2018, from
https://www.tutorialspoint.com/cryptography/modern_cryptography.htm

Purchase answer to see full
attachment