%0 Conference Proceedings
%T An Open Source Toolkit for iOS Filesystem Forensics
%+ National University of Sciences and Technology [Islamabad] (NUST)
%A Cheema, Ahmad, Raza
%A Iqbal, Mian, Waseem
%A Ali, Waqas
%Z Part 3: Mobile Device Forensics
%< avec comité de lecture
%( IFIP Advances in Information and Communication Technology
%B 10th IFIP International Conference on Digital Forensics (DF)
%C Vienna, Austria
%Y Gilbert Peterson
%Y Sujeet Shenoi
%I Springer
%3 Advances in Digital Forensics X
%V AICT-433
%P 227-235
%8 2014-01-08
%D 2014
%R 10.1007/978-3-662-44952-3_15
%K Mobile phone forensics
%K iOS
%K iPhone
%Z Computer Science [cs]Conference papers
%X Despite the fact that every iOS release introduces new security restrictions that must be overcome in order to recover data from iPhones, the locations where the data of interest resides are generally consistent. This paper analyzes the iOS filesystem and identifies files and directories that contain data that can aid investigations of traditional crimes involving iPhones as well as hacking and cracking attacks launched from iPhones. Additionally, best practices for minimizing the false positive rate during data carving are identified. These findings are implemented in an open source forensic investigation toolkit that operates in a forensically-sound manner.
%G English
%Z TC 11
%Z WG 11.9
%2 https://inria.hal.science/hal-01393773/document
%2 https://inria.hal.science/hal-01393773/file/978-3-662-44952-3_15_Chapter.pdf
%L hal-01393773
%U https://inria.hal.science/hal-01393773
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-AICT
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC11
%~ IFIP-DF
%~ IFIP-WG11-9
%~ IFIP-AICT-433