Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Near field communication is becoming more commonly available in modern mobile devices, such as smartphones and tablets. This functionality can be used to communicate between such devices, or with standalone NFC terminals such as payment points.

What vulnerabilities might this open us up to? What security standards are implemented to prevent eavesdropping? Are there any practical (known) attacks using NFC that are worth knowing about?

share|improve this question
Also see -- – atdre May 20 '15 at 17:11
up vote 8 down vote accepted

Like bluetooth and 802.11, I think we will see eavesdropping used in many attacks. I suspect that some variant of the classic man-in-the-middle attack will crop up too, despite being mitigated as much as possible in the design of the specifications. Although I don't have practical experience or familiarity with these attacks, I can point you to a few articles that you may want to check out:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.