Title :
iOS Data Recovery Using Low-Level NAND Images
Author :
Wei-dong Qiu ; Qian Su ; Bo-zhong Liu ; Yan Li
Author_Institution :
Shanghai Jiao Tong Univ., Shanghai, China
Abstract :
To recover erased data from iOS devices, specialists use a brute-force method to decrypt the passwords, then extract data images directly from low-level NAND storage and analyze the redundancy caused by its file translation layer (FTL) behavior. iOS devices´ garbage collection strategy significantly affects data recovery.
Keywords :
NAND circuits; authorisation; operating systems (computers); redundancy; storage management; FTL behavior; brute-force method; data image extraction; erased data recovery; file translation layer behavior; garbage collection strategy; iOS data recovery; iOS devices; low-level NAND images; low-level NAND storage; password decryption; redundancy; Access controls; Authentication; Cyrptography; Data recovery; Database management; Digital forenics; Flash memories; Smart phones; NAND; data recovery; digital forensics; iOS; iPhone;
Journal_Title :
Security & Privacy, IEEE
DOI :
10.1109/MSP.2013.50