University of Maryland Global Campus Modern Mobile Devices Sophistication Discussion
Description
Having Trouble Meeting Your Deadline?
Get your assignment on University of Maryland Global Campus Modern Mobile Devices Sophistication Discussion completed on time. avoid delay and – ORDER NOW
Discuss what you believe to be the most difficult aspect of acquiring digital evidence from mobile devices in an investigation. Discuss two ways in which this difficulty might be overcome by investigators.
What are some issues that should be considered in acquiring digital evidence from the Cloud?
Respond to this post (Gio):
A first example of an obstacle that may create a challenge in acquiring digital evidence from a mobile device is that modern mobile phones often come equipped with built in security features to protect user data and privacy. The reason this may create an increased burden in acquiring data as that modern mobile phones are equipped with a default mechanism that encrypts information from the hardware layer to the software layer. The investigator may need to utilize tools to breach through this encryption mechanism before they can begin to extract data. Another challenge in acquiring digital evidence from a mobile cellphone is preventing data modification and ensuring that an attempt to extract data from the device will not alter data that is currently present on the device. The act of switching on a device that was previously shut off upon discovering runs the risk of altering the data as even when the device may appear to be shut off, background processes may still be in progress. This is why it is in best practice to remove the batter upon retrieval from a crime scene and to avoid turning on the phone directly at the scene. Forensics experts should keep the device powered off with the batter removed until the device is ready to be connected via USB with a forensics workstation. The work station will send the mobile device commands as the device will communicate back to the work station with stored data.
A potential difficulty with extracting data as digital evidence from the cloud is that there may be occasions where the investigators might require support or cooperation from the Cloud Service Provider. The distribution of the data stored in the cloud my span across several states or several nations which can complicate legalities of the chain of custody. Investigators are unable to maintain physical control over data that is stored in the cloud, therefore investigators may rely on support from the provider which may not necessarily guarantee an audit trail to maintain an appropriate chain of custody. As the data stored in the cloud may cross borders, there is potential difficulty in acquiring permission and authentication in acquiring data that is stored for an evidence search.
Mahalik, Heather, Tamma, Rohit (25 April, 2016) Mobile Forensics and Its Challanges. Retrieved: https://hub.packtpub.com/mobile-forensics-and-its-challanges/
Kostadinov, Dimitar ( 6 July, 2019) The Mobile Forensics Process: Steps & Types. Retrieved: https://resources.infosecinstitute.com/topic/mobile-forensics-process-steps-types/
Feng, Xiaohua, Zhao, Yuping (Accessed: 16 February 2021) Digital Forensics Challenges to Big Data in the Cloud. Retrieved: https://core.ac.uk/download/pdf/82971343.pdf
