News

iPhone Poses Forensic Challenges

Apple's iPhone could potentially be a gold mine of information for criminal forensic analysts. It could also, however, prove to be a headache thanks to its OS X foundation, according to Wired.

The combination iPod and smart phone is easy to use by design, which means that users are more likely to take advantage of its features. By using those features, iPhone owners could be leaving a digital trail that could eventually become evidence in a criminal investigation.

Derrick Donnelly, chief technology officer at Blackbag Technologies, a company that specializes in Apple-related forensic research, commented "The ease of use lends itself to more use... and more use creates more artifacts."

The problem is how to get information off of an iPhone without potentially tampering with evidence. If there is a potential for information to be altered in any way as it is removed from the device, that raises the possibility that it has been changed to benefit or harm the suspect which ultimately means it is of little value in court.

Paraben CEO Amber Schroader, doesn't see the iPhone as a reliable source of evidence. Her company develops digital-forensics software, and like Paraben's competitors, does not have tools that can extract data from an iPhone.

"The iPhone is evil," she said. "It's Mac OS X, and it's a completely closed system."

For now, investigators may be limited to turning on an iPhone, and taking photographs of its display. Alternately, they may use a suspect's iPhone to lead them back to other devices it has been connected to, including their own computer. From there, investigators could use existing computer forensic techniques to hunt for evidence.

Once forensic experts find a way to work around Apple's tight lock-down on the iPhone, it may prove to hold a treasure trove of evidence in criminal investigations, and Mr. Donnelly agrees. "There is more information in there than your average cell phone," he said.

10 comments from the community.

You can post your own below.

+ show options

Your current settings, click to change: Sort Oldest First, Show Guest Posts, Hide Community Stats

A guest said: (hide)

Yeah...because professional criminals are high on the list of iPhone users. This is such rubbish.

Quote this post ↓

derpassante said:

member since 23 Aug 2007 with 15 posts, unranked, send him a message or view his profile

"The iPhone is evil," she said. "It's Mac OS X, and it's a completely closed system."

Its hard for me to imagine the mental process that resulted in this statement. Its a complete non sequitur.

Quote this post ↓

A guest said: (hide)

"The iPhone is evil," she said. "It's Mac OS X, and it's a completely closed system."

Hmmm... Kind of scary that she views a more secure platform as "evil". I understand her perspective, but it's still a little funny and ironic. On one side, law enforcement tries to solve and help prevent hackers from doing their job but on the forensics side, it's better to have a hackable platform so they can get in there and find information when they need to.

Two sides of a coin I guess.

Quote this post ↓

Sir Harry Flashman said:

member since 08 Feb 2007 with 787 posts, unranked, send him a message or view his profile

A forensic challenge? That might explain why Karl Rove is using an iPhone.

Quote this post ↓

A guest said: (hide)

Big Brother has problems cracking a Mac? Good!

Erosion of Right to Privacy much?

Quote this post ↓

A guest said: (hide)

Quote:
Yeah...because professional criminals are high on the list of iPhone users. This is such rubbish.

What about white collar crime, say, someone who is embezzeling from their employer, or cooking the books at their company? It's not inconceivable that someone like that could own an iPhone, or a BlackBerry or other smartphone, for that matter. So, it's not rubbish to address this issue, but there is a delicious irony here, as others have pointed out.

I wonder, though, what about forensics investigators who need to access a Mac? Do they encounter the same problems there?

Quote this post ↓

macslut said:

member since 03 Sep 2004 with 61 posts, unranked, send him a message or view his profile

By the way, if you want to make your iPhone even more secure, hack it and change the root password. It's relatively easy to do, but it turns your iPhone into SATAN.

Quote this post ↓

vasic said:

member since 09 Aug 2005 with 278 posts, unranked, send him a message or view his profile

It's funny how the the first thing people think of when one mentions the word 'criminals' is low-level stuff (pick pockets, robbers, petty thieves...). Try thinking of drug dealers (not the street guys, althouth even they have fancy cellphones), but their distributors, or the mobsters, or any serious criminal for whose work the investigators whould bother using forensic science. Obviously, nobody would bother looking for cellphone forensic data from a guy who's been breaking into houses and stealing VCRs. Where do they look for this stuff? Probably in high-value cases (racketeering, extortion, kidnapping, murder...). Somehow, I'm sure most of these criminals would have no problem affording an iPhone.

Maybe professional criminals are not exactly high on the list of iPhone users (or any other cellphone users); I'm sure, though, that the iPhone is rather high on the professional criminal's list. And if that's the case, law enforcement would love to be able to retrieve data from such a device when one belonged to a criminal under investigation.

Quote this post ↓

Biff said:

member since 08 Apr 2004 with 1479 posts, unranked, send him a message or view his profile

I don't get it. Do OTHER phones used non-closed operating systems?

I think she actually means since it's a full blown OS, its more complicated and thus more work for her and her peeps. Boo-hoo.

Quote this post ↓

ctopher said:

member since 25 Aug 2006 with 134 posts, unranked, send him a message or view his profile

Biff don't you get it?

They SAY that it's hard to get evidence off of the iPhone. Criminals read that and think "Hey, I've got to get me one of those"

So if you're using an iPhone, you're probably a criminal.

Quote this post ↓

Post Your Comments

  Remember Me

Not a member? Register now. You can post comments without logging in, but they'll show up as a "guest" post.


Please enter the word exactly as you see it in the image above. Registered users aren't prompted for this. Having trouble reading the image get a new one.