an overview of mobile device forensics charline f. nixon, phd, dm, mba, mscs, gcia ceh, chfi, ecsa,...

17
AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

Upload: isaac-reid

Post on 26-Mar-2015

222 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

AN OVERVIEW OF MOBILE DEVICE FORENSICS

Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA

CEH, CHFI, ECSA, CAST, MFE

& 10 other certs...

Calhoun Community College

Page 2: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

AGENDA

Page 3: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

WORLDWIDE SMARTPHONE STAT

The 100 million club: the top 10 mobile markets by number of subscriptions

Country

Mobile subscriptions in millions

Population in millions (source: World bank)

3G/4G subscriptions in millions

Sources (subs; 3G subs)

Last update

World 6,835m 6,973.7m

2,096m

ITU Informa WCIS

Feb 2013 Dec 2012

1 China 1,155.3m 1,344.1m

293.0m

China Mobile; China Unicom; China Telecom

April 2013

2 India Active: 699m; total: 906.6m

1241m

70.6m

TRAI Informa WCIS

September 2012 Dec 2012

3 United States

321.7m 311.6m

256.0m

CTIA Informa WCIS

June 2012 Dec 2012

4 Indonesia 260m 242.3m

47.6m

BuddeComm Informa WCIS

May 2012 Dec 2012

5 Brazil 259.3m 196.7m

65.5m

Anatel/Teleco Anatel/Teleco Oct 2012

6 Russia 227.1m 141.9m

27.0m

Wireless Intelligence Informa WCIS

June 2012 Dec 2012

7 Japan 128.4m 127.8m

104.4m (Mobile Internet subs)

TCA TCA

October 2012

8 Pakistan 120.5m 176.7m

N/A

PTA Sept 2012

9 Germany 112.7m 81.7m

53.2m

Bundesnetzagentur Informa WCIS

Q1 2013 Dec 2012

10 Nigeria Active: 106.9m; total: 143

162.5m

10.5m

NCC Informa WCIS

Sept 2012 Dec 2012

Note: Informa 3G stats are forecasted estimates for Dec 2012.

Data compiled by: © mobiThinking

www.mobithinking.com

Page 4: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

ANDROID - DEV. 2003GOOGLE –ACQUIRED 2005ANDROID-BASED PHONE 2008

http://www.appbrain.com/stats/android-app-downloads

Top Android app categories

1. Personalization2. Entertainment

3. Books & Reference4. Lifestyle

5. ToolsTop Android phones

1. Samsung Galaxy S32. Samsung Galaxy S23. Samsung Galaxy S44. Samsung Galaxy Note II

5. Nexus 7

Android 2013

No. Of Android Devices

900 Million

No. of Apps in Google Play Store

1 Million

User Download Apps/Games/Month

1.5 Million

Estimated Malicious Apps

1 Million

Total Android App Installs

48 Billion

Average Android Activations

1.5 Millionwww.digitalinformationworld.com

Page 5: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

APPLE IPHONE

www.patentlyapple.com

Page 6: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

SMARTPHONE & SOCIAL MEDIA IMPACT

www.digitalinformationworld

Page 7: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

SMARTPHONE & SOCIAL MEDIA IMPACT

www.digitalinformationworld.com

Page 8: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

MOBILE DEVICE THREATS

www.digitalinformationworld

Page 9: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

GSM-Global System for Mobile Communication (almost the world standard) - divides the frequency band into multiple channels so that one user can place a call through a tower at the same time. GSM SIM card can be used in another GSM phone. Simultaneous voice and data. GSM carriers use AT&T, T-Mobile. SIM card contains phonebook, call logs, sms

WHAT IS THE DIFFERENCE BETWEEN GSM & CDMA

www.gizmodo.com

www.support.gif.com

Page 10: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

CDMA- Code Division Multiple Access (CDMA one 2G, CDMA2000-3G)- it digitized calls over one another, unpack them in code sequence. Has better security. CDMA locked to one network, can be switch but with both carrier approval. CDMA carriers include Verizon, Sprint, US Cellular

● US favor in CDMA with around 43% of the market. Worldwide CDMA accounts for 13% of phone . Uses MEID while GSM uses SIM card.

www.gizmodo.com

WHAT IS THE DIFFERENCE BETWEEN GSM & CDMA

www.wirelessdictionary.com

Page 11: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

PHONE FORENSICS TOOLS THAT EXAMINE CDMA, GSM, SIM AND GPS.

Cellebrite UFED -https://www.cellebrite.comParaben Device Seizure-www.paraben.comParaben Sticks (Data Recovery, Phone Recovery Stick, Porn

Stick)Secure View -www.secureview.usFTK -www.accessdata.comEnCase-https://www.encase.comOxygenForensics - www.oxygen-forensic.com

secureview

cellebrite

Oxygen-forensic

Page 12: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

Tree Comparison Forensic Tools

Device Seizure

Oxygen Forensic

Secure ViewParaben Forensic Products

Pin Breaking Ability

Process of image can be longer

Paraben Sticks

(iOS and Android)

Advanced search through phone

database

Geo Event Positionin

g

Droid Root Capability

Works well in

basic/smart phone

Very User

Friendly

Cheap & Easy to Use

Reliable Product for Examiner

Not all Sticks Execute &

Read Correctly

30-day trial free & easy

Trial is hard to get (will have to wait)

Page 13: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

TAKE AWAY:

The World Smartphone rule is –

No Texting and Driving

(46% of Teens text & driving)

Think Green- Recycle Properly

http://www.don’tdriveandtext.org/

Page 14: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

SOFTWARE/RESOURCES TOOLS:

www.digitalinformationworld

www.mobithinking.comhttp://www.pbs.org/frontlineworld/stories/ghana804/video/

video_index.html

Page 15: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

www.youtube.com/watch?v=OkpBcFDjk7Y

Page 16: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

QUESTIONS???

Page 17: AN OVERVIEW OF MOBILE DEVICE FORENSICS Charline F. Nixon, PhD, DM, MBA, MSCS, GCIA CEH, CHFI, ECSA, CAST, MFE & 10 other certs... Calhoun Community College

THANKS TO THE FOLLOWINGEC-Council

Paul Coggin, DyneticsCalhoun Community College

Students & Faculty (Dr. Naina, Tammy, Nisheeth)

Maribeth & Larry Newman & Christine Alvarez