Learning iOS Forensics, 2nd Edition

Key Features

• This book is a comprehensive update to Learning iOS Forensics
• This practical book will not only cover the critical aspects of digital forensics, but also mobile forensics
• Whether you’re a forensic analyst or an iOS developer, there’s something in this book for you
• The authors, Mattia Epifani and Pasquale Stirparo, are respected members of the community, they go into extensive detail to cover critical topics

Book Description

Mobile forensics is used within many different domains, but is chiefly employed in the field of information security. By understanding common attack vectors and vulnerability points, security professionals can develop measures and examine system architectures to harden security on iOS devices. This book is a complete manual on the identification, acquisition, and analysis of iOS devices, updated to iOS 8 and 9.

You will learn by doing, with various case studies. The book covers different devices, operating system, and apps. There is a completely renewed section on third-party apps with a detailed analysis of the most interesting artifacts. By investigating compromised devices, you can work out the identity of the attacker, as well as what was taken, when, why, where, and how the attack was conducted.

What you will learn

• Identify an iOS device between various models (iPhone, iPad, iPod Touch) and verify the iOS version installed
• Crack or bypass the protection passcode chosen by the user
• Acquire, at the most detailed level, the content of an iOS Device (physical, advanced logical, or logical)
• Recover information from a local backup and eventually crack the backup password
• Download back-up information stored on iCloud
• Analyze system, user, and third-party information from a device, a backup, or iCloud
• Examine malicious apps to identify data and credential thefts

Table of Contents

Chapter 1: Digital and Mobile Forensics
Chapter 2: Introduction to iOS Devices
Chapter 3: Evidence Acquisition from iDevices
Chapter 4: Evidence Acquisition and Analysis from iTunes Backup
Chapter 5: Evidence Acquisition and Analysis from iCloud
Chapter 6: Analyzing iOS Devices
Chapter 7: Applications and Malware Analysis
Appendix A: References
Appendix B: Tools for iOS Forensics
Appendix C: Self-test Answers