Evaluating Digital Forensic Options for the Apple iPad

Abstract : The iPod Touch, iPhone and iPad from Apple are among the most popular mobile computing platforms in use today. These devices are of forensic interest because of their high adoption rate and potential for containing digital evidence. The uniformity in their design and underlying operating system (iOS) also allows forensic tools and methods to be shared across product types. This paper analyzes the tools and methods available for conducting forensic examinations of the Apple iPad. These include commercial software products, updated methodologies based on existing jailbreaking processes and the analysis of the device backup contents provided by iTunes. While many of the available commercial tools offer promise, the results of our analysis indicate that most comprehensive examination of the iPad requires jailbreaking to perform forensic duplication and manual analysis of its media content.
Document type :
Conference papers
Complete list of metadatas

Cited literature [8 references]  Display  Hide  Download

https://hal.inria.fr/hal-01569561
Contributor : Hal Ifip <>
Submitted on : Thursday, July 27, 2017 - 8:22:33 AM
Last modification on : Friday, December 1, 2017 - 1:16:43 AM

File

978-3-642-24212-0_20_Chapter.p...
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Andrew Hay, Dennis Krill, Benjamin Kuhar, Gilbert Peterson. Evaluating Digital Forensic Options for the Apple iPad. 7th Digital Forensics (DF), Jan 2011, Orlando, FL, United States. pp.257-273, ⟨10.1007/978-3-642-24212-0_20⟩. ⟨hal-01569561⟩

Share

Metrics

Record views

278

Files downloads

577