A generic smartphone forensic investigation process model

Smartphones are sources of digital evidence and repository for considerable amount of personal and work-related information about the phone users, their network of contacts and activities. Investigations involving various such devices have been identified as growing challenges to digital forensic researchers and practitioners. Similar to other areas of digital forensic practice, the process models developed for smartphones do not consider satisfying any scientific requirement of a digital investigation process models to make such models reliable and admissible in court. They have also been criticized for their tendency to focus on one particular type of devices and failure to embrace the level of practicality and generality needed to be applied in the investigation of all smartphones, independent of their platforms. In addition, the common challenge associated with these models is that they tried to encompass all aspects of digital forensic activities in a single-tier, high level process models. This makes such models too unwieldy, impractical and unlikely to be adopted. This research proposes a new forensic process model for digital investigation of smartphones, called Generic Smartphone Forensic Investigation Process Model (GSFIPM), which addresses both the practical needs of practitioners and the expectations of legal domain for a reliable and structured process model to be followed. The proposed model is a multi-tier, objective-based, iterative process model that is generically applicable in investigation of any type of smartphones. GSFIPM is integrated with Encompassing Proceedings as principles that have a wider scope than a single process in the course of an investigation. The second tier of the GSFIPM focuses on the evidence collection and preservation process since this process is arguably the most critical process in the course of a digital investigation. Any doubt cast upon this process makes the output of other processes moot. A two-stage formal model called Formal Evidence Collection Model for Smartphones (FECMS) is designed, comprising of two UML Activity Diagrams, two Implementation Guidelines and the Overarching Principles. This research employed the Design Science Research Process (DSRP) methodology on the basis that it is an ‘ideal approach’ in the problem domain of digital forensic and especially appropriate for creating a new process model. The effectiveness of the GSFIPM and FECMS to satisfy the intended requirements are independently evaluated by a group of digital forensic experts. Feedbacks from these experts are taken into account and amendments are applied as appropriately as possible. The feedbacks received from experts, regarding the GSFIPM, are generally positive in fulfilling the scientific requirements. GSFIPM is also believed to hold new features in the design, namely being multi-tier and iterative, and containing overarching principles and stratification in roles and responsibilities. The feedbacks are also optimist for FECMS, in terms of utility and usability. This research demonstrates how GSFIPM and FECMS can be practically applicable in smartphone investigations and beneficial to the digital forensic practitioners in various environments

The Proceedings of 14th Australian Digital Forensics Conference, 5-6 December 2016, Edith Cowan University, Perth, Australia

Conference Foreword This is the fifth year that the Australian Digital Forensics Conference has been held under the banner of the Security Research Institute, which is in part due to the success of the security conference program at ECU. As with previous years, the conference continues to see a quality papers with a number from local and international authors. 11 papers were submitted and following a double blind peer review process, 8 were accepted for final presentation and publication. Conferences such as these are simply not possible without willing volunteers who follow through with the commitment they have initially made, and I would like to take this opportunity to thank the conference committee for their tireless efforts in this regard. These efforts have included but not been limited to the reviewing and editing of the conference papers, and helping with the planning, organisation and execution of the conference. Particular thanks go to those international reviewers who took the time to review papers for the conference, irrespective of the fact that they are unable to attend this year. To our sponsors and supporters a vote of thanks for both the financial and moral support provided to the conference. Finally, to the student volunteers and staff of the ECU Security Research Institute, your efforts as always are appreciated and invaluable. Yours sincerely, Conference Chair Professor Craig Valli Director, Security Research Institut

Ios Mobile Device Forensics: Initial Analysis

The ability to recover forensic artifacts from mobile devices is proving to be an ever-increasing challenge for investigators. Coupling this with the ubiquity of mobile devices and the increasing complexity and processing power they contain results in a reliance on them by suspects. In investigating Apple’s iOS devices -- namely the iPhone and iPad -- an investigator’s challenges are increased due to the closed nature of the platforms. What is left is an extremely powerful and complex mobile tool that is inexpensive, small, and can be used in suspect activities. Little is known about the internal data structures of the device or the proper method of extracting forensically sound images of them. This article will discuss the current state of iOS mobile device forensics. An examination of what data is contained on the devices as well as what can currently be extracted from suspect device is looked at. Jailbreaking an iOS device will be evaluated against its pros and cons along with current professional and open source tools. Finally, a discourse on our continuing research into deleted file recovery and future works is presented. Keywords: Digital Forensics, iOS, iPhone, iPad, Mobile Devices, Security, Analysis, Tool

Data Ingredients: smart disclosure and open government data as complementary tools to meet policy objectives. The case of energy efficiency.

Open government data are considered a key asset for eGovernment. One could argue that governments can influence other types of data disclosure, as potential ingredients of innovative services. To discuss this assumption, we took the example of the U.S. 'Green Button' initiative – based on the disclosure of energy consumption data to each user – and analysed 36 energy-oriented digital services reusing these and other data, in order to highlight their set of inputs. We find that apps suggesting to a user a more efficient consumption behaviour also benefit from average retail electricity cost/price information; that energy efficiency 'scoring' apps also need, at least, structured and updated information on buildings performance; and that value-added services that derive insights from consumption data frequently rely on average energy consumption information. More in general, most of the surveyed services combine consumption data, open government data, and corporate data. When setting sector-specific agendas grounded on data disclosure, public agencies should therefore consider (contributing) to make available all three layers of information. No widely acknowledged initiatives of energy consumption data disclosure to users are being implemented in the EU. Moreover, browsing EU data portals and websites of public agencies, we find that other key data ingredients are not supplied (or, at least, not as open data), leaving room for possible improvements in this arena

A mobile applications innovation ecosystem framework for Botswana

Text in EnglishThe role that locally relevant services and content can play in the development of societies cannot be underestimated. The proliferation of mobile phones in Africa’s developing countries is a significant enabler, which provides access to such locally relevant services and content. Mobile applications have the potential to support the development of the African continent through bolstering the main mechanisms of innovation, inclusion and efficiency. This has been demonstrated by instances of increased literacy, improved access to health care, banking, crowd sourcing and provision of farming and/or agricultural assistance. Successful cases of such mobile-based services include Kenya’s M-Pesa, which has allowed millions of rural people, who do not have access to traditional banking facilities, to send and receive money as well as pay utility bills and school fees. The development of similar innovative and locally relevant mobile-based solutions, which is currently considered to be in its infancy, is key to improving the lives of people in developing countries. This study identifies the essential components of an innovation ecosystem, for the development and presentation of a Mobile Applications Innovation Ecosystem Framework for Botswana. An innovation ecosystem enables effective interaction amongst entrepreneurs, companies, universities, research organisations, investors and government agencies towards maximising economic impact and potential. To gain a practical understanding of the context in which locally relevant mobile-based services can be developed, the study adopted a pragmatic research approach. Through combining the 4Cs Framework for ICT and the systems theory’s Triple Helix Model of Innovation, the study proceeded to develop the framework using a Design Science Research (DSR) methodology. DSR guided the identification of the components, which make up the mobile applications innovation ecosystem within government, industry and higher education sectors, as extracted from the literature review. This process facilitated initial framework designs, which were demonstrated to and evaluated by conveniently sampled stakeholders from relevant helices. Thereafter a synthesised framework was presented for evaluation by knowledgeable professionals from the mobile applications innovation ecosystem. The study contributes to the theoretical knowledgebase by presenting a theoretical framework for understanding ICT4D innovation frameworks and mobile applicationsSchool of ComputingPh. D. (Information Systems

Life Can Change in the Blink of an Eye Capstone

Texting and driving is one of the most widespread and uncontrollable of epidemics that have arose to prominence in the 21st century. Texting and driving is now a global issue, that has left nations across the road scrambling to implement new laws and preventative measures to stunt the increasing rates of accidents and fatalities caused by texting and driving. The severity of the issue has lead to a multitude of different entities ranging from domestic and foreign governments, cell phone and car manufacturers, cell phone carriers, and insurance agencies to seek new methods to prevent texting and driving. Determining the current methods used by these entities to address texting and driving and to alter the behavior of drivers was the basis of the research found in this report. The research collected and analyzed in the following sections illustrates the current actions being taken in the fight to end texting and driving. Based off the research gathered, several conclusions will also be drawn pertaining to what the major salient issues are surrounding texting and driving, and recommendations will be given that will provide guidance towards how texting and driving should be tackled locally in Worcester and at the state level

Characterizing Breakthrough Cancer Pain Using Ecological Momentary Assessment with a Smartphone App: Feasibility and Clinical Findings

Background: mobile applications (apps) facilitate cancer pain ecological momentary assessment (EMA) and provide more reliable data than retrospective monitoring. The aims of this study are (a) to describe the status of persons with cancer pain when assessed ecologically, (b) to analyze the utility of clinical alarms integrated into the app, and (c) to test the feasibility of implementing an app for daily oncological pain monitoring. Methods: in this feasibility study, 21 patients (mean age = 56.95 years, SD = 10.53, 81.0% men) responded to an app-based evaluation of physical status (baseline and breakthrough cancer pain (BTcP)) and mental health variables (fatigue, mood, and coping) daily during 30 days. Results: cancer pain characterization with the app was similar to data from the literature using retrospective assessments in terms of BTcP duration and perceived medication effectiveness. However, BTcP was less frequent when evaluated ecologically. Pain, fatigue, and mood were comparable in the morning and evening. Passive coping strategies were the most employed daily. Clinical alarms appear to be useful to detect and address adverse events. App implementation was feasible and acceptable. Conclusion: apps reduce recall bias and facilitate a rapid response to adverse events in oncological care. Future efforts should be addressed to integrate EMA and ecological momentary interventions to facilitate pain self-management via apps