iPhone Forensics: Recovering Evidence, Personal Data, and Corporate Assets

Jonathan Zdziarski

  • 出版商: O'Reilly
  • 出版日期: 2008-10-21
  • 定價: $1,400
  • 售價: 1.4$199
  • 語言: 英文
  • 頁數: 140
  • 裝訂: Paperback
  • ISBN: 0596153589
  • ISBN-13: 9780596153588
  • 立即出貨(限量)

買這商品的人也買了...

商品描述

"This book is a must for anyone attempting to examine the iPhone. The level of forensic detail is excellent. If only all guides to forensics were written with this clarity!" -Andrew Sheldon, Director of Evidence Talks, computer forensics experts

With iPhone use increasing in business networks, IT and security professionals face a serious challenge: these devices store an enormous amount of information. If your staff conducts business with an iPhone, you need to know how to recover, analyze, and securely destroy sensitive data. iPhone Forensics supplies the knowledge necessary to conduct complete and highly specialized forensic analysis of the iPhone, iPhone 3G, and iPod Touch. This book helps you:

  • Determine what type of data is stored on the device
  • Break v1.x and v2.x passcode-protected iPhones to gain access to the device
  • Build a custom recovery toolkit for the iPhone
  • Interrupt iPhone 3G's "secure wipe" process
  • Conduct data recovery of a v1.x and v2.x iPhone user disk partition, and preserve and recover the entire raw user disk partition
  • Recover deleted voicemail, images, email, and other personal data, using data carving techniques
  • Recover geotagged metadata from camera photos
  • Discover Google map lookups, typing cache, and other data stored on the live file system
  • Extract contact information from the iPhone's database
  • Use different recovery strategies based on case needs

And more. iPhone Forensics includes techniques used by more than 200 law enforcement agencies worldwide, and is a must-have for any corporate compliance and disaster recovery plan.

商品描述(中文翻譯)

這本書對於任何試圖研究iPhone的人來說都是必讀之作。它提供了卓越的法醫細節。如果所有的法醫指南都能以這樣的清晰度來撰寫就好了!- Andrew Sheldon,Evidence Talks公司的主管,電腦法醫專家。

隨著企業網絡中使用iPhone的增加,IT和安全專業人員面臨著一個嚴峻的挑戰:這些設備存儲了大量的信息。如果您的員工使用iPhone進行業務活動,您需要知道如何恢復、分析和安全銷毀敏感數據。《iPhone法醫學》提供了進行完整且高度專業的iPhone、iPhone 3G和iPod Touch法醫分析所需的知識。本書幫助您:

- 確定設備上存儲的數據類型
- 破解v1.x和v2.x的iPhone密碼保護,以獲取設備訪問權限
- 構建iPhone的自定義恢復工具包
- 中斷iPhone 3G的“安全擦除”過程
- 進行v1.x和v2.x iPhone用戶磁盤分區的數據恢復,並保留和恢復整個原始用戶磁盤分區
- 使用數據雕刻技術恢復已刪除的語音郵件、圖像、電子郵件和其他個人數據
- 從相機照片中恢復地理標記的元數據
- 發現存儲在實時文件系統上的Google地圖查詢、輸入緩存和其他數據
- 從iPhone的數據庫中提取聯繫人信息
- 根據案件需求使用不同的恢復策略

還有更多。《iPhone法醫學》包含了全球200多個執法機構使用的技術,是任何企業合規和災難恢復計劃的必備工具。