摘要
iPhone作为一种市场占有率较高的主流智能行动电话,在各行各业中应用广泛。因此,也衍生出针对iPhone上各种加密信息的提取与解密、已删除信息的恢复,以及多媒体信息的真实性鉴定等需求。目前,国内对于iOS数据恢复研究成果十分欠缺,这里提出了一种通过直接读取底层NAND存储,分析NAND本身的FTL读写特性所造成的数据冗余,以此来达到成功恢复已删除数据的目的,此方法可为iOS平台上的数据恢复人员提供一定的指导作用。
As a popular smartphone of considerable market share, iPhone is widely used in various walks of life, thus deriving the needs for extracting and decrypting the encrypted data and recovering the deleted data on iPhone, and authenticating the multimedia content. Currently, it is still deficient in the research of iOS forensic at home. This paper presents a method for iOS data recovery by extracting data image directly from low-level NAND storage and analyzing the redundancy caused by FTL behavior. This method could provide certain guidance for personnel engaged in iOS data recovery.
出处
《信息安全与通信保密》
2012年第12期79-81,共3页
Information Security and Communications Privacy
