Skip to main navigation Skip to search Skip to main content

A simple cost-effective framework for iPhone forensic analysis

  • SUNY Buffalo
  • Zayed University

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

29 Scopus citations

Abstract

Apple iPhone has made significant impact on the society both as a handheld computing device and as a cellular phone. Due to the unique hardware system as well as storage structure, iPhone has already attracted the forensic community in digital investigation of the device. Currently available commercial products and methodologies for iPhone forensics are somewhat expensive, complex and often require additional hardware for analysis. Some products are not robust and often fail to extract optimal evidence without modifying the iPhone firmware which makes the analysis questionable in legal platforms. In this paper, we present a simple and inexpensive framework (iFF) for iPhone forensic analysis. Through experimental results using real device, we have shown the effectiveness of this framework in extracting digital evidence from an iPhone.

Original languageEnglish
Title of host publicationDigital Forensics and Cyber Crime - Second International Conference, ICDF2C 2010
Pages27-37
Number of pages11
DOIs
StatePublished - 2011
Event2nd International Conference on Digital Forensics and Cyber Crime, ICDF2C 2010 - Abu Dhabi, United Arab Emirates
Duration: Oct 4 2010Oct 6 2010

Publication series

NameLecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST
Volume53
ISSN (Print)1867-8211

Conference

Conference2nd International Conference on Digital Forensics and Cyber Crime, ICDF2C 2010
Country/TerritoryUnited Arab Emirates
CityAbu Dhabi
Period10/4/1010/6/10

Keywords

  • Forensics
  • Iphone
  • Itunes
  • Jailbreaking
  • Smartphone

Fingerprint

Dive into the research topics of 'A simple cost-effective framework for iPhone forensic analysis'. Together they form a unique fingerprint.

Cite this