Browse > Article
http://dx.doi.org/10.3745/KTCCS.2016.5.7.173

A Study on the Evidence Investigation of Forged/Modulated Time-Stamp at iOS(iPhone, iPad)  

Lee, Sanghyun (고려대학교 정보보호대학원 정보보호학과)
Lee, Yunho (고려대학교 정보보호대학원 정보보호학과)
Lee, Sangjin (고려대학교 정보보호대학원)
Publication Information
KIPS Transactions on Computer and Communication Systems / v.5, no.7, 2016 , pp. 173-180 More about this Journal
Abstract
Since smartphones possess a variety of user information, we can derive useful data related to the case from app data analysis in the digital forensic perspective. However, it requires an appropriate forensic measure as smartphone has the property of high mobility and high possibility of data loss, forgery, and modulation. Especially the forged/modulated time-stamp impairs the credibility of digital proof and results in the perplexity during the timeline analysis. This paper provides traces of usage which could investigate whether the time-stamp has been forged/modulated or not within the range of iOS based devices.
Keywords
iOS Forensic; Forged Time-Stamp; Modulated Time-Stamp; iPhone Forensic; Digital Forensic;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Business Post [Internet], "The market share of smartphone," 2015, http://www.businesspost.co.kr/news/articleView.html?idxno=9866.
2 ZD Net Korea [Internet], "Domestic smartphone subscribers," 2015, http://www.zdnet.co.kr/news/news_view.asp?artice_id=20150120151312.
3 Wikipedia [Internet], "iOS Jailbreak," https://ko.wikipedia.org/wiki/IOS_ %ED%83%88%EC%98%A5.
4 SANS, "Forensic analysis on iOS devices," 2012.
5 M. Kaart and S. Laraghy, "Android forensics: Interpretation of timestamps," Digital Investigation, Vol.11, Issue 3, pp. 234-248, 2014.   DOI
6 Sean Morrissey, "iOS Forensic Analysis for iPhone, iPad and iPod touch," Apress, 2010.
7 Graeme Horsman and Lynne R. Conniss, "Investigating evidence of mobile phone usage by drivers in road traffic accidents," Digital Investigation, Vol.12, pp.S39-S37, 2015.
8 SungKyoung Un and WooYoun Choi, "A Trend of Smartphone Forensic Technology," Tech Report of ETRI, 2013.
9 JaeHyun So, "Search evidence of the iPhone Backup file," AhnLab Tech Report [Internet], 2012, http://www.ahnlab.com/kr/site/securityinfo/secunews/secuNewsView.do?seq=20118.
10 Sangah Kim, "The Analysis of Synchronized or Restored Pictures in Smart Devices," Graduate School of Information Security, Korea University, 2014.