Analysis of the Forensic Traces Left by AirPrint in Apple iOS Devices

Gómez-Miralles, Luis; Arnedo-Moreno, Joan

doi:10.1109/waina.2013.40

Cited by 6 publications

(2 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The results of these tests, which can be seen in more detail in [2], show that under iOS 4 and with no data encryption in place the temporary files generated by AirPrint are indeed written to disk and are potentially recoverable even after rebooting the device or turning it off.…”

Section: Resultsmentioning

confidence: 99%

“…This paper focuses on the AirPrint feature of iOS devices (iPhone, iPad, and iPod Touch), which allows them to print wirelessly to compatible printers [1]. In a previous paper [2] we observed that printing a document through AirPrint leaves a trace in the filesystem of the iOS device in the form of a temporary file containing the printed content and with a specific metadata that allows for the identification of this precise kind of files in the filesystem. This paper extends our previous research to analyze if these temporary files can be recovered even in modern iOS versions which use hardwarebased data encryption.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

AirPrint Forensics: Recovering the Contents and Metadata of Printed Documents from iOS Devices

Gómez-Miralles¹,

Arnedo-Moreno

2015

Mobile Information Systems

View full text Add to dashboard Cite

Since its presentation by Apple, both the iPhone and iPad devices have achieved great success and gained widespread popularity. This fact, added to the given idiosyncrasies of these new portable devices and the kind of data they may store, opens new opportunities in the field of computer forensics. In 2010, version 4 of the iOS operating system introduced AirPrint, a simple and driverless wireless printing functionality supported by hundreds of printer models from all major vendors. This paper describes the traces left in the iOS device when AirPrint is used and presents a method for recovering content and metadata of documents that have been printed.

show abstract

Section: Resultsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

AirPrint Forensics: Recovering the Contents and Metadata of Printed Documents from iOS Devices

Gómez-Miralles¹,

Arnedo-Moreno

2015

Mobile Information Systems

View full text Add to dashboard Cite

show abstract

Touch NMR: An NMR Data Processing Application for the iPad

Chen

Yan

et al. 2014

J. Chem. Educ.

View full text Add to dashboard Cite

Nuclear magnetic resonance (NMR) spectroscopy has become one of the most powerful technologies to aid research in numerous scientific disciplines. With the development of consumer electronics, mobile devices have played increasingly important roles in our daily life. However, there is currently no application available for mobile devices able to perform basic NMR data processing. In this article, we introduce Touch NMR, a free iPad application for basic NMR data processing. It is capable of handling free induction decay data in the Agilent, Bruker, and JEOL Delta formats. It can also accomplish basic NMR data operations, such as fast Fourier transform, phase correction, baseline correction, referencing, peak picking, integration, and others. Furthermore, in Touch NMR, distortionless enhancement by polarization transfer spectral editing, relaxation-time fitting, and 2D spectrum displaying with projections in two dimensions are also available. For the purpose of offering users a better experience, multitouch functionality and cloud storage are additionally provided. Finally, it is believed that Touch NMR can save considerable time for both instructors and students in tackling NMR data processing, during in-class education as well as during exams.

show abstract

A Review of Mobile Forensic Investigation Process Models

et al. 2020

View full text Add to dashboard Cite

Mobile Forensics (MF) field uses prescribed scientific approaches with a focus on recovering Potential Digital Evidence (PDE) from mobile devices leveraging forensic techniques. Consequently, increased proliferation, mobile-based services, and the need for new requirements have led to the development of the MF field, which has in the recent past become an area of importance. In this article, the authors take a step to conduct a review on Mobile Forensics Investigation Process Models (MFIPMs) as a step towards uncovering the MF transitions as well as identifying open and future challenges. Based on the study conducted in this article, a review of the literature revealed that there are a few MFIPMs that are designed for solving certain mobile scenarios, with a variety of concepts, investigation processes, activities, and tasks. A total of 100 MFIPMs were reviewed, to present an inclusive and up-to-date background of MFIPMs. Also, this study proposes a Harmonized Mobile Forensic Investigation Process Model (HMFIPM) for the MF field to unify and structure whole redundant investigation processes of the MF field. The paper also goes the extra mile to discuss the state of the art of mobile forensic tools, open and future challenges from a generic standpoint. The results of this study find direct relevance to forensic practitioners and researchers who could leverage the comprehensiveness of the developed processes for investigation.INDEX TERMS Mobile forensics, investigation process model, digital forensics.

show abstract

Analysis of the Forensic Traces Left by AirPrint in Apple iOS Devices

Cited by 6 publications

References 7 publications

AirPrint Forensics: Recovering the Contents and Metadata of Printed Documents from iOS Devices

AirPrint Forensics: Recovering the Contents and Metadata of Printed Documents from iOS Devices

Touch NMR: An NMR Data Processing Application for the iPad

A Review of Mobile Forensic Investigation Process Models

Contact Info

Product

Resources

About