智能手机取证技术展望（约2028年）.pdf

1、Ian WhiffinIs it apocalyptical?who am I?Ian WhiffinGeek2004-2009South Yorkshire Police(UK)Patrol Officer2009-2013Calgary Police Service(Can)Response Officer2013-2020010101110101Calgary Police Service(Can)Forensics Examiner2020-Present010101110101CellebriteSME/Product Manager12 Years as an examinerHu

2、ndreds of casesThousands of devices28 Court appearancesthe topicWhat will be the state of cell phone forensics in the next 3 years?GoodBadUglythe challengesEvolution of accessPIN Lock*USB LockInactivityRebootGeoLockComplexPasscode*Auto-WipeRemote WipeUninhibitedEncryptionMDMBiometricsthe challengesD

3、ata OverloadComputerCell PhoneOld Cell PhonesWatchCloudTabletVehicle02004006008001000120020192016201420112009Android Capacitythe challengesData Overload020040060080010001200202220192016201420112009iPhone Capacity*Expandable with SD Cardthe challenges02004006008001000120020192016201420112009Android C

4、apacity*Expandable with SD CardData Overload020040060080010001200202220192016201420112009iPhone CapacityExponential data increaseLarge MediaOld Cell Phonesthe challengesiOSAndroidPrimary StoreApple App StoreGoogle Play StoreApps Available1.9 million apps1.55 million appsSide Loading*In EUYesData Ove

5、rloadthe challengesThe MeshComputerCell PhoneOld Cell PhonesTabletWatchCloudVehiclethe challengesAIthe challengesE2E Encrypted Data&WarrantsUnencrypted dataUnencrypted dataEncrypted datathe challengesCloud 2FA/MFA34User:tjone123Password:*the conclusion.MeshAIWarrantsMFASome of these challenges arent

6、 newAccessOverloadthe conclusion.MeshAIWarrantsMFAAccessOverloadSolutionsBut together,they create a new challengeWhen the solutions are also challengesSpecifically,taking shortcutsOver reliance on toolsOver reliance on the tools can lead to no actual examination taking place.With