Analiza značajki alata SPF Pro u forenzici mobilnih uređaja

master's thesis

• Title (english): Analysis of SPF Pro Tool Features in Mobile Forensics
• Author: Matija Stepić
• Mentor: Siniša Husnjak (mentor)
• Committee member: Dragan Peraković (predsjednik povjerenstva)
• Committee member: Ivan Cvitić (član povjerenstva)
• Committee member: Marko Periša (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2019-09-25, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Digitalna forenzika jedna je od grana forenzičkih znanosti, a osnovna zadaća joj je otkrivanje i tumačenje elektroničkih podataka. Digitalna forenzika sastoji se od mnogo grana, a jedna od njih je mobilna forenzika koja je usmjerena otkrivanju i tumačenju digitalnih dokaza s mobilnih uređaja. Osnovni cilj forenzičkih ispitivanja je očuvanje podataka u izvornom obliku. Forenzička analiza provodi se primjenom brojnih metoda poput ručne, logičke, datotečne i fizičke ekstrakcije. Te metode nalaze se u sklopu određenih forenzičkih alata koje provode forenzički istražitelji. Ekstrakcija podataka je pojam koji se odnosi na dohvaćanje podataka u cilju daljnje obrade i pohrane. Tijekom provođenja forenzičke analize forenzički istražitelji susreću se s brojnim izazovima kao i antiforenzikom koja onemogućava ekstrakciju podataka mobilnih uređaja. Forenzički alati se prema osnovnoj podjeli dijele na softverske i hardverske alate. Oni su namijenjeni za pomoć forenzičkim istražiteljima u prikupljanju, očuvanju i ispitivanju digitalnih dokaza s mobilnih uređaja. Jedan od alata mobilne forenzike je softverski alat SPF Pro kineske tvrtke SalvationDATA. Korištenje alata SPF Pro je vrlo jednostavno, no u usporedbi s ostalim alatima iste namjene predstavlja se kao nedovoljno dobar izbor. Alat je usmjeren kineskim mobilnim uređajima te uređajima koji imaju ostvaren Root pristup. Za ostale uređaje alat ne omogućava provođenje velikog broja metoda ekstrakcije.

Abstract (english)

Digital forensics is one of the branches of forensic science and its primary task is to detect and interpret electronic data. Digital forensics consists of many branches and one of them is mobile forensics, which is aimed to detect and interpret digital evidence from mobile devices. The main goal of forensic investigation is preserving data in its original form. Forensic analysis is performed by using a number of methods, such as: manual, logical, file and manual extraction. These methods can be find in forensic tools and task for forensic investigators is to implement them. Data extraction is a term that refers to the retrieval of data for further processing and storage. During forensic analysis, forensic investigators face numerous challenges as well as antiforensics that inhibits the extraction of mobile device data. Forensic tools are divided into software and hardware tools by basic division, and they are intended to assist forensic investigators in collecting, preserving and examining digital evidence from mobile devices. One of the tools of mobile forensics is the software tool SPF Pro from Chinese company SalvationDATA. Using SPF Pro is very simple, but in comparison to other tools of the same purpose, it seems like it is not a proper choice. The tool is targeted at Chinese mobile devices and devices that have Root access. For other devices, the tool does not allow a large number of extraction methods to be performed.

• Keywords: mobilni uređaj; mobilna forenzika; ekstrakcija podataka; forenzički alat; SPF Pro; analiza podataka
• Keywords (english): mobile device; mobile forensics; data extraction; forensic tool; SPF Pro; data analysis
• Language: croatian
• URN:NBN: urn:nbn:hr:119:142084
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Information and Communication Traffic; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2019-11-13 12:50:40