| 摘要: |
| 随着移动互联网的广泛应用，智能手机、平板等新型智能终端设备在各种各样的违法犯罪活动中开始扮演越来越重要的角色，从涉案手机中提取的数据常常包含与违法犯罪行为相关的重要线索和证据。然而，移动智能终端设备不断提升的安全设计可能使得取证人员无法从设备中提取数据，给电子数据取证鉴定工作提出了新的挑战。本文详细分析当前主流的iOS、Android和Windows Phone等平台下的移动设备的安全机制，研究了主要的安全机制破解和取证技术及其在目前电子数据取证工作中的应用。最后，对未来面向新型移动智能终端电子数据取证技术研究发展方向进行了探讨。 |
| 关键词: 智能终端取证 电子数据取证鉴定 数据恢复 |
| DOI：10.19363/j.cnki.cn10-1380/tn.2016.03.004 |
| 投稿时间：2016-06-05修订日期：2016-06-29 |
| 基金项目:本课题得到国家发改委2013年信息安全专项（发改办高技[2015]298号）项目资助。 |
|
| Research on Digital Forensics of Smart Devices |
| JIN Bo,WU Songyang,XIONG Xiong,ZHANG Yong |
| Key Lab of Information Network Security of Ministry of Public Security(The Third Research Institute of Ministry of Public Security), Shanghai 201024, China |
| Abstract: |
| As the widespread application of mobile Internet, smart devices such as smartphones and pads also increasingly play an important roles in a wide variety of criminal activities. It has been proven that the extracted data from smartphone of suspects often critical clues and evidence of digital investigation. However, the improved security design of smartphones in recent years seriously hinders the evidence acquisition for mobile phone forensics and brings us new challenges. This paper analyzed current security mechanisms of popular mobile devices of iOS, Android and Windows Phone, studied the major crack technologies of smartphones and their application in digital investigation. This paper also discussed research directions of smartphone forensics technologies in the future. |
| Key words: Smartphone forensics digital investigation data recovery |
