基于Palm OS移动设备的计算机取证与分析

COMPUTER FORENSIC ANALYSIS ON PALM OS MOBILE DEVICES

随着PDA等商务移动设备应用的普及,针对这些设备的犯罪取证和分析的需求也将逐渐增大。首先介绍和比较了当前主流的PDA/智能手机的操作系统及其安全隐患,然后主要针对Palm OS PDA的系统结构和取证分析工具进行了介绍,最后介绍如何使用pdd.PDA Seizure等工具对Palm OS PDA进行基本的取证及分析,如完整性分析、字符串匹配分析、密码破解、证据数据搜索等。

As the application of the PDA is spreading, the demand of forensic analysis on such devices is also increasing. Firstly, the popular operating systems running on PDAs and their security problems are introduced. Then, the architecture and the forensic tools based on Palm OS PDA are focused on. Finally, it will introduce how to use tools like pdd and PDA Seizure to do some basic forensic analysis on Palm OS PDA is introduced, such as integrity analysis, string matching analysis, password hack and evidence finding.