IOS anti-forensics: How can we securely conceal, delete and insert data?

Proceedings of the Annual Hawaii International Conference on System Sciences

Volumn , Issue , 2014, Pages 4838-4847

  D'Orazio, Christian ^a   Ariffin, Aswami ^a,b   Choo, Kim Kwang Raymond ^a  

^a UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

^b CyberSecurity Malaysia ^*  (Malaysia)

Author keywords

[No Author keywords available]

Indexed keywords

MOBILE DEVICES; SYSTEMS SCIENCE;

ANTI-FORENSICS; AT RESTS; CLASS-D; FORENSIC INVESTIGATION; IOS DEVICES; SECURITY AND PRIVACY;

IOS (OPERATING SYSTEM);

EID: 84902240279     PISSN: 15301605     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HICSS.2014.594     Document Type: Conference Paper

References (17)

1. Azadegan, S., Yu, W., Liu, H., Sistani, M. & Acharya, S. 2012. Novel anti-forensics approaches for smart phones. In Proceedings of HICSS 2012, pp. 5424-5431.
2. Apple. 2004. Hfs plus volume format. Technical Note TN1150. DOI=http://developer.apple.com/legacy/mac/library/#technotes/tn/tn1150.html
3. Apple.2012. iOS security (Oct. 2012). DOI=http://images.apple.com/iphone/ business/docs/iOS-Security-Oct12.pdf
4. Burghardt, A. & Feldman, A. 2008. Using the HFS+ journal for deleted file recovery. Digital Investigations, 5 (Supplement), pp. S76-S82.
5. MAC Developer Library. getxattr(2) OS developer tools manual page. DOI=https://developer.apple.com/library/mac/#documentation/Darwin/Reference/ ManPages/man2/getxattr.2.html
6. MAC Developer Library. getattrlist(2) OS developer tools manual page. DOI=https://developer.apple.com/library/mac/#documentation/Darwin/Reference/ ManPages/man2/getattrlist.2.html
7. MAC Developer Library. setxattr(2) OS developer tools manual page. DOI=https://developer.apple.com/library/mac/#documentation/Darwin/Reference/ ManPages/man2/setxattr.2.html
8. MAC Developer Library. setattrlist(2) OS developer tools manual page. DOI=https://developer.apple.com/library/mac/#documentation/Darwin/Reference/ ManPages/man2/setattrlist.2.html
9. Zdziarski, J. 2012. Hacking and securing iOS applications. Sebastopol: O'Reilly Media, Inc.
10. Distefano, A., Mea, G. & Pace, F. 2010. Android anti-forensics through a local paradigm. Digital Investigation, 7(Supplement), pp. S83-S94.
11. Hilley, S. 2007. Anti-forensics with a small army of exploits. Digital Investigation, 4(1), pp. 13-15.
12. Kianas, A., Restivo, K., & Shirer, M. 2012. Android and iOS surge to new smartphone OS record in second quarter, according to IDC. Press release 8 August. http://www.idc.com/getdoc.jsp?containerId=prUS23638712
13. Quick, D. & Choo, K.K.R. 2013a. Dropbox analysis: Data remnants on user machines. Digital Investigation, 10(1), pp. 3-18.
14. Quick, D. & Choo, K.K.R. 2013b. Digital droplets: Microsoft SkyDrive forensic data remnants. Future Generation Computer Systems, 29(6), pp. 1378-1394.
15. Schaad, J. & Housley, R. 2002. RFC 3394: Advanced encryption standard (AES) key wrap algorithm, September. http://www.ietf.org/rfc/rfc3394.txt
16. Whittaker, Z. 2013. Apple iOS 6.1.3 fix contains another lock screen bypass flaw. ZDNet, 20 March. http://www.zdnet.com/apple-ios-6-1-3-fix-contains- another-lock-screen-bypass-flaw-7000012912/
17. Tassone, C., Martini, B., Choo, K.K.R., Slay, J. 2013. Mobile device forensics: A snapshot. Trends & Issues in Crime and Criminal Justice, 460, pp. 1-7.