Zoekresultaten

Blader door alle records: alle velden: "*"

AuteurJochem van Kerkwijk
TitelHandling iOS encryption in a forensic investigation
BegeleidersCoen Steenbeek, Marco Veen, Derk Wieringa
Jaar2011
Pagina's30
FaculteitFaculteit der Natuurwetenschappen, Wiskunde en Informatica
OpleidingFNWI MSc System and Network Engineering
SamenvattingSince the introduction of the iPhone 3GS Apple offers a new form of encryption scheme called Data Protection. In this research project a relation has been made on how Data Protection has consequences for a forensic investigation. The report holds a literature study that elaborates on what has been done in this field before as well as to what the latest forensic methods are. A practical attack as presented by Bédrune and Sigwald[4] has been performed on a first generation iPad equipped with version 4.3.3 of iOS, which currently is the latest version. Using this implementation it is relatively easy to circumvent iOS Data Protection using a bootrom exploit. With these technical abilities forensic possibilities are identified. iOS devices are hardened against human attack vectors, not against a brute forcing computer. Data Protection has successfully been broken which allows for full forensic investigation. The difficulty is in presenting this data to court, as the operating system on iDevices is prone to changes which introduce inconsistencies if the audit is performed by a different party. Traditional forensics simply does not apply to mobile devices and requires an alternative investigation path.
Soort document scriptie master
Download bestand