摘要
随着智能手机的发展，手机取证在犯罪调查、情报收集中越发显得重要。iOS手机取证是一项规范和精细的工作，为更好地在iOS设备尤其是iPhone手机上提取有价值的信息或者证据，首先介绍了iOS设备的基本属性，如i0S操作系统、文件系统、数据存储方式、数据库系统，并结合实际取证过程分析了iOS设备的基本数据获取方式、数据获取技术、自带应用程序分析、第三方应用程序分析等，以帮助取证人员更好地开展iOS手机取证实践。
With the development of smart phones,mobile forensics is becoming increasingly important in criminal in- vestigation and intelligence collection, lOS mobile forensics is a normative and fine work in practice. In order to effec- tively extract valuable information or evidence from iOS devices, especially from iPhones, this paper introduced the basic properties of the iOS device, such as iOS operating system, lOS file system, data storage method, lOS database, and analyzed the basic data acquisition modes and techniques, preinstalled applications analysis, third-part application analysis, so as to help the forensics personnel to better carry out iOS mobile forensics in practice.
作者
陈光宣
丁丽萍
杜锦
CHEN Guang-xuan DING Li-ping DU Jin(Zhejiang Police College, Hangzhou 310053, China Digital Forensics Lab, Institute of Software Application Technology,Guangzhou ＆ Chinese Academy of Sciences,Guangzhou 511458,China Yunnan Police College, Kunming 650223, China)
出处
《计算机科学》
CSCD
北大核心
2016年第B12期1-6,共6页
Computer Science
基金
本文受NSFC-浙江两化融合联合基金（U1509219）,国家高技术研究发展计划（863计划）（2015AA016003）资助.
关键词
手机取证
电子取证
证据获取
Mobile forensics,Digital forensics,Evidence acquisition
