Smartphone Forensic Analysis

•

1 like•1,446 views

00heights

Presented in 2011 Symposium of Advanced Forensics

Technology

Smartphone Forensic

SungKyong Un
ETRI
2011.11.24

What is Smartphone Forensic?
■ To get clues and/or evidences from smartphones

source: Archigraphs@iconarhive source: samsum.com

2

Difference - Dummy vs. Smart
Item Dummy Smart
Target Models >1,000/Year >10/Year
OS Symbian, Qualcomm iOS, Android, Windows
Mobile, BlackberryOS
Interface Various USB
Acquisition Logical, Physical Logical, Physical,
Backup
Data Phone book, Call history, + Email, Web History,
SMS, Photo, Schedule Map, Location, SNS,
Message, App, ID/PW
DB Format Various Sqlite
3rd Party App - App Market

5

Which?

source: http://www.asymco.com

6

Difference - iOS vs. Android
Item iOS Android
Phone Manufacturer Apple Samsung, HTC,
Motorola, ...
App Market iTunes App Store Android, Amazon, SKT,
KT, Samsung, ...
Security Sandbox, App Screening, Sandbox, Permission,
App Singing, Passcode App Singing, Pattern
Lock, Location Finder, Screen Lock, Remote
Remote Lock, Remote Wipe, File Encryption
Wipe, File Encryption,
Encrypted Backup
Backup PC, iCloud -
Expansion Storage No Yes
Multitasking Limited Yes

7

Difference - iOS vs. Android

source: http://www.androidcentral.com source:http://http://forums.appleinsider.com/showt
hread.php?s=&threadid=124611

10

11
Analysis
Tools
Acquisition
Acquisition

Analysis - Relationship

source: ETRI

13

Analysis - Web Browsing

source: ETRI
14

Analysis - Location

source: http://radar.oreilly.com/2011/04/apple-location-tracking.html
16

Analysis - App
Category App

Phone Call Skype, Viber, Google Voice, ...

Message Cacao Talk, iMessage, Twitter DM, Facebook Message, ...

SNS Twitter, Facebook, me2day, ...

Storage Dropbox, uCloud, SugarSync, Box.net, iCloud, ...

Key DataVault, 1Password, Strip, ...

17

Analysis - Communication Network

source: http://www.i2group.com/documents/video/ANB8_5_US.flv

18

Analysis - Social Network

source: http://www.youtube.com/watch?v=Q3rhx9MtUro

19

Challenge

source: http://theunderstatement.com
20

Challenge
■ Apple
• 425,000 Apps
• 15B Downloads
■ Google
• 200,000 Apps
• 0.5B Downloads

July, 2011

source: http://readwriteweb.com
21

Architecture

Backup Files
Analysis Request

Analysis Result

SW or
Web Browser
Presentation

USB
Connection

22

Viewers also liked

Digital forensic uploadSetia Juli Irzal Ismail

Розслідування Bellingcat щодо збитого на Донбасі МН17tsnua

Toksikologi forensik smallpox ppt. anna maria manullang

Siasatan ForensikAzman Hj. Ayup

Digital Forensic: Brief Intro & Research ChallengeAung Thu Rha Hein

Computer forensics pptNikhil Mashruwala

Viewers also liked (6)

Digital forensic upload

Розслідування Bellingcat щодо збитого на Донбасі МН17

Toksikologi forensik smallpox ppt.

Siasatan Forensik

Digital Forensic: Brief Intro & Research Challenge

Computer forensics ppt

Similar to Smartphone Forensic Analysis

AppTalk Frontline: Web vs Hybrid vs NativeSebastian de Mel

Future of Mobile Web Application and Web App StoreJonathan Jeon

Stronger than Chuck Norris: SharePoint in clouds, on earth, in subway and in ...Adis Jugo

Hybrid Apps / iPhoneDevCon 2010Avenga Germany GmbH

Introduction to AndroidMUFIX Community

Telecoms 2.0: Understanding the Impact of Open MobileMobileMonday Norway

MTC Spring 2013 - crossplatform woes - robert virkus - 2013-03-13Enough Software

Falsy Values - Warsaw 2011Brian LeRoux

Smartphone Reporting Done SmarterVictor Hernandez

Introduction to Android by Demian NeidetcherMatthew McCullough

Ugly truths about html5 moosecon - robert virkus - 2013-03-07Enough Software

API-Centric Rails Web Apps and Hybrid Mobile App IntegrationExist

Mobile Development PlatformsAndri Yadi

Secure Android Apps- nVisium SecurityJack Mannino

mLearnCon 2013 - Developer session, Geoff Stead, Head of Mobile Learning, Qua...worklearnmobile

Mobile Application Development with WP7 & OthersAndri Yadi

The Library in Your Pocket: Mobile Trends for LibrariesMeredith Farkas

Day 1 Android: Before Getting StartedAhsanul Karim

Anuradha_Resume_2016Anuradha Dubey

General Assembly Sydney: Digital Frontiers WorkshopAlex Young

Similar to Smartphone Forensic Analysis (20)

AppTalk Frontline: Web vs Hybrid vs Native

Future of Mobile Web Application and Web App Store

Stronger than Chuck Norris: SharePoint in clouds, on earth, in subway and in ...

Hybrid Apps / iPhoneDevCon 2010

Introduction to Android

Telecoms 2.0: Understanding the Impact of Open Mobile

MTC Spring 2013 - crossplatform woes - robert virkus - 2013-03-13

Falsy Values - Warsaw 2011

Smartphone Reporting Done Smarter

Introduction to Android by Demian Neidetcher

Ugly truths about html5 moosecon - robert virkus - 2013-03-07

API-Centric Rails Web Apps and Hybrid Mobile App Integration

Mobile Development Platforms

Secure Android Apps- nVisium Security

mLearnCon 2013 - Developer session, Geoff Stead, Head of Mobile Learning, Qua...

Mobile Application Development with WP7 & Others

The Library in Your Pocket: Mobile Trends for Libraries

Day 1 Android: Before Getting Started

Anuradha_Resume_2016

General Assembly Sydney: Digital Frontiers Workshop

Recently uploaded

Testing tools and AI - ideas what to try with some tool examplesKari Kakkonen

React JS; all concepts. Contains React Features, JSX, functional & Class comp...Karmanjay Verma

Email Marketing Automation for Bonterra Impact Management (fka Social Solutio...Jeffrey Haguewood

Modern Roaming for Notes and Nomad – Cheaper Faster Better Strongerpanagenda

Genislab builds better products and faster go-to-market with Lean project man...Farhan Tariq

Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...itnewsafrica

A Journey Into the Emotions of Software DevelopersNicole Novielli

Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...panagenda

Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...Alkin Tezuysal

[Webinar] SpiraTest - Setting New Standards in Quality AssuranceInflectra

UiPath Community: Communication Mining from Zero to HeroUiPathCommunity

Zeshan Sattar- Assessing the skill requirements and industry expectations for...itnewsafrica

Microsoft 365 Copilot: How to boost your productivity with AI – Part two: Dat...Nikki Chapple

Varsha Sewlal- Cyber Attacks on Critical Critical Infrastructureitnewsafrica

Design pattern talk by Kaya Weers - 2024 (v2)Kaya Weers

Decarbonising Buildings: Making a net-zero built environment a realityIES VE

Bridging Between CAD & GIS: 6 Ways to Automate Your Data Integrationmarketing932765

Potential of AI (Generative AI) in Business: Learnings and InsightsRavi Sanghani

Microsoft 365 Copilot: How to boost your productivity with AI – Part one: Ado...Nikki Chapple

React Native vs Ionic - The Best Mobile App FrameworkPixlogix Infotech

Recently uploaded (20)

Testing tools and AI - ideas what to try with some tool examples

React JS; all concepts. Contains React Features, JSX, functional & Class comp...

Email Marketing Automation for Bonterra Impact Management (fka Social Solutio...

Modern Roaming for Notes and Nomad – Cheaper Faster Better Stronger

Genislab builds better products and faster go-to-market with Lean project man...

Irene Moetsana-Moeng: Stakeholders in Cybersecurity: Collaborative Defence fo...

A Journey Into the Emotions of Software Developers

Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...

Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...

[Webinar] SpiraTest - Setting New Standards in Quality Assurance

UiPath Community: Communication Mining from Zero to Hero

Zeshan Sattar- Assessing the skill requirements and industry expectations for...

Microsoft 365 Copilot: How to boost your productivity with AI – Part two: Dat...

Varsha Sewlal- Cyber Attacks on Critical Critical Infrastructure

Design pattern talk by Kaya Weers - 2024 (v2)

Decarbonising Buildings: Making a net-zero built environment a reality

Bridging Between CAD & GIS: 6 Ways to Automate Your Data Integration

Potential of AI (Generative AI) in Business: Learnings and Insights

Microsoft 365 Copilot: How to boost your productivity with AI – Part one: Ado...

React Native vs Ionic - The Best Mobile App Framework

Smartphone Forensic Analysis

1. Smartphone Forensic SungKyong Un ETRI 2011.11.24

2. What is Smartphone Forensic? ■ To get clues and/or evidences from smartphones source: Archigraphs@iconarhive source: samsum.com 2

3. Why? source: http://www.asymco.com 3

4. Difference 4

5. Difference - Dummy vs. Smart Item Dummy Smart Target Models >1,000/Year >10/Year OS Symbian, Qualcomm iOS, Android, Windows Mobile, BlackberryOS Interface Various USB Acquisition Logical, Physical Logical, Physical, Backup Data Phone book, Call history, + Email, Web History, SMS, Photo, Schedule Map, Location, SNS, Message, App, ID/PW DB Format Various Sqlite 3rd Party App - App Market 5

6. Which? source: http://www.asymco.com 6

7. Difference - iOS vs. Android Item iOS Android Phone Manufacturer Apple Samsung, HTC, Motorola, ... App Market iTunes App Store Android, Amazon, SKT, KT, Samsung, ... Security Sandbox, App Screening, Sandbox, Permission, App Singing, Passcode App Singing, Pattern Lock, Location Finder, Screen Lock, Remote Remote Lock, Remote Wipe, File Encryption Wipe, File Encryption, Encrypted Backup Backup PC, iCloud - Expansion Storage No Yes Multitasking Limited Yes 7

8. Difference - iOS vs. Android 8

9. Difference - iOS vs. Android 9

10. Difference - iOS vs. Android source: http://www.androidcentral.com source:http://http://forums.appleinsider.com/showt hread.php?s=&threadid=124611 10

11. 11 Analysis Tools Acquisition Acquisition

12. Analysis - Timeline source: ETRI 12

13. Analysis - Relationship source: ETRI 13

14. Analysis - Web Browsing source: ETRI 14

15. Analysis - Location source: ETRI 15

16. Analysis - Location source: http://radar.oreilly.com/2011/04/apple-location-tracking.html 16

17. Analysis - App Category App Phone Call Skype, Viber, Google Voice, ... Message Cacao Talk, iMessage, Twitter DM, Facebook Message, ... SNS Twitter, Facebook, me2day, ... Storage Dropbox, uCloud, SugarSync, Box.net, iCloud, ... Key DataVault, 1Password, Strip, ... 17

18. Analysis - Communication Network source: http://www.i2group.com/documents/video/ANB8_5_US.flv 18

19. Analysis - Social Network source: http://www.youtube.com/watch?v=Q3rhx9MtUro 19

20. Challenge source: http://theunderstatement.com 20

21. Challenge ■ Apple • 425,000 Apps • 15B Downloads ■ Google • 200,000 Apps • 0.5B Downloads July, 2011 source: http://readwriteweb.com 21

22. Architecture Backup Files Analysis Request Analysis Result SW or Web Browser Presentation USB Connection 22

Smartphone Forensic Analysis

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (6)

Similar to Smartphone Forensic Analysis

Similar to Smartphone Forensic Analysis (20)

More from 00heights

More from 00heights (6)

Recently uploaded

Recently uploaded (20)

Smartphone Forensic Analysis