Third Party Application Forensics on Apple Mobile Devices

Abstract

Abstract

Using Smartphones as a Proxy for Forensic Evidence Contained in Cloud Storage Services

“…No deleted files were recovered. Files and meta-data related to the applications are stored under /private/var/mobile/Applications in the User Partition [27]. Each application creates a directory under this path.…”

“…A recent study recovered more than 11,000 data artifacts from just 49, predominately low-end, devices [25]. As with a traditional mobile phone, the smartphone not only stores call logs, text messages and personal contacts, but it also has the ability to store web-browsing artifacts, email messages, instant messenger lots, GPS coordinates, as well as third-party application related data [26][27][28].…”

Advances of Mobile Forensic Procedures in Firefox OS

“…Similar research was published by Lee and Park by capturing the SNS data using different forensic tools [41]. On the other hand, Levinson explore an investigation for third party applications in iOS platform [42]. According to Levinson, most mobile forensic work emphasis on typical mobile telephony data such as contact information, SMS, and voicemail messages.…”

A Unified Forensic Framework for Data Identification and Collection in Mobile Cloud Social Network Applications

“…Most of the third-party applications on the Apple Mobile platform contain a significant amount of forensic-rich data [17]. The user"s information during the interaction with applications is stored in plain text format and can be recovered from the user data partition of the device.…”