• DocumentCode
    40982
  • Title

    iOS Data Recovery Using Low-Level NAND Images

  • Author

    Wei-dong Qiu ; Qian Su ; Bo-zhong Liu ; Yan Li

  • Author_Institution
    Shanghai Jiao Tong Univ., Shanghai, China
  • Volume
    11
  • Issue
    5
  • fYear
    2013
  • fDate
    Sept.-Oct. 2013
  • Firstpage
    49
  • Lastpage
    55
  • Abstract
    To recover erased data from iOS devices, specialists use a brute-force method to decrypt the passwords, then extract data images directly from low-level NAND storage and analyze the redundancy caused by its file translation layer (FTL) behavior. iOS devices´ garbage collection strategy significantly affects data recovery.
  • Keywords
    NAND circuits; authorisation; operating systems (computers); redundancy; storage management; FTL behavior; brute-force method; data image extraction; erased data recovery; file translation layer behavior; garbage collection strategy; iOS data recovery; iOS devices; low-level NAND images; low-level NAND storage; password decryption; redundancy; Access controls; Authentication; Cyrptography; Data recovery; Database management; Digital forenics; Flash memories; Smart phones; NAND; data recovery; digital forensics; iOS; iPhone;
  • fLanguage
    English
  • Journal_Title
    Security & Privacy, IEEE
  • Publisher
    ieee
  • ISSN
    1540-7993
  • Type

    jour

  • DOI
    10.1109/MSP.2013.50
  • Filename
    6510417