Digital Forensics and Cyber Crime. Second International ICST Conference, ICDF2C 2010, Abu Dhabi, United Arab Emirates, October 4-6, 2010, Revised Selected Papers

Research Article

A Simple Cost-Effective Framework for iPhone Forensic Analysis

Download
494 downloads
  • @INPROCEEDINGS{10.1007/978-3-642-19513-6_3,
        author={Mohammad Husain and Ibrahim Baggili and Ramalingam Sridhar},
        title={A Simple Cost-Effective Framework for iPhone Forensic Analysis},
        proceedings={Digital Forensics and Cyber Crime. Second International ICST Conference, ICDF2C 2010, Abu Dhabi, United Arab Emirates, October 4-6, 2010, Revised Selected Papers},
        proceedings_a={ICDF2C},
        year={2012},
        month={5},
        keywords={iPhone Forensics Smartphone Jailbreaking iTunes},
        doi={10.1007/978-3-642-19513-6_3}
    }
    
  • Mohammad Husain
    Ibrahim Baggili
    Ramalingam Sridhar
    Year: 2012
    A Simple Cost-Effective Framework for iPhone Forensic Analysis
    ICDF2C
    Springer
    DOI: 10.1007/978-3-642-19513-6_3
Mohammad Husain1,*, Ibrahim Baggili2,*, Ramalingam Sridhar1,*
  • 1: University at Buffalo, The State University of New York
  • 2: Zayed University
*Contact email: imhusain@buffalo.edu, ibrahim.baggili@zayed.ac.ae, rsridhar@buffalo.edu

Abstract

Apple iPhone has made significant impact on the society both as a handheld computing device and as a cellular phone. Due to the unique hardware system as well as storage structure, iPhone has already attracted the forensic community in digital investigation of the device. Currently available commercial products and methodologies for iPhone forensics are somewhat expensive, complex and often require additional hardware for analysis. Some products are not robust and often fail to extract optimal evidence without modifying the iPhone firmware which makes the analysis questionable in legal platforms. In this paper, we present a simple and inexpensive framework (iFF) for iPhone forensic analysis. Through experimental results using real device, we have shown the effectiveness of this framework in extracting digital evidence from an iPhone.