Evaluating Digital Forensic Options for the Apple iPad
Document Type
Conference Proceeding
Publication Date
2011
Abstract
The iPod Touch, iPhone and iPad from Apple are among the most popular mobile computing platforms in use today. These devices are of forensic interest because of their high adoption rate and potential for containing digital evidence. The uniformity in their design and underlying operating system (iOS) also allows forensic tools and methods to be shared across product types. This paper analyzes the tools and methods available for conducting forensic examinations of the Apple iPad. These include commercial software products, updated methodologies based on existing jailbreaking processes and the analysis of the device backup contents provided by iTunes. While many of the available commercial tools offer promise, the results of our analysis indicate that most comprehensive examination of the iPad requires jailbreaking to perform forensic duplication and manual analysis of its media content.
DOI
10.1007/978-3-642-24212-0_20
Source Publication
Advances in Digital Forensics VII - 7th IFIP WG 11.9 International Conference on Digital Forensics, Revised Selected Papers
Recommended Citation
Hay A., Krill D., Kuhar B., Peterson G. (2011) Evaluating Digital Forensic Options for the Apple iPad. In: Peterson G., Shenoi S. (eds) Advances in Digital Forensics VII. DigitalForensics 2011. IFIP Advances in Information and Communication Technology, vol 361. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-24212-0_20
Comments
Copyright statement: © IFIP International Federation for Information Processing 2011
The "Link to Full Text" button on this page loads the conference paper hosted at the publisher’s website. Provided by the Springer Nature SharedIt content sharing program. Please attribute the work using the citation indicated below.