000 04066naaaa2200481uu 4500
003 BUT
005 20230403122550.0
006 m o d
007 cr|mn|---annan
008 20220514s2022 xx |||||o ||| eng|| d
020 _a9783030984670
040 _aoapen
_coapen
041 0 _aeng
080 _a004
100 1 _aHummert, Christian
_4edt
245 1 0 _aMobile Forensics – The File Format Handbook
_bCommon File Formats and File Systems Used in Mobile Devices
260 _aCham
_bSpringer Nature
_c2022
300 _a1 electronic resource (269 p.)
506 0 _aOpen Access
_2star
_fUnrestricted online access
520 _aThis open access book summarizes knowledge about several file systems and file formats commonly used in mobile devices. In addition to the fundamental description of the formats, there are hints about the forensic value of possible artefacts, along with an outline of tools that can decode the relevant data. The book is organized into two distinct parts: Part I describes several different file systems that are commonly used in mobile devices. · APFS is the file system that is used in all modern Apple devices including iPhones, iPads, and even Apple Computers, like the MacBook series. · Ext4 is very common in Android devices and is the successor of the Ext2 and Ext3 file systems that were commonly used on Linux-based computers. · The Flash-Friendly File System (F2FS) is a Linux system designed explicitly for NAND Flash memory, common in removable storage devices and mobile devices, which Samsung Electronics developed in 2012. · The QNX6 file system is present in Smartphones delivered by Blackberry (e.g. devices that are using Blackberry 10) and modern vehicle infotainment systems that use QNX as their operating system. Part II describes five different file formats that are commonly used on mobile devices. · SQLite is nearly omnipresent in mobile devices with an overwhelming majority of all mobile applications storing their data in such databases. · The second leading file format in the mobile world are Property Lists, which are predominantly found on Apple devices. · Java Serialization is a popular technique for storing object states in the Java programming language. Mobile application (app) developers very often resort to this technique to make their application state persistent. · The Realm database format has emerged over recent years as a possible successor to the now ageing SQLite format and has begun to appear as part of some modern applications on mobile devices. · Protocol Buffers provide a format for taking compiled data and serializing it by turning it into bytes represented in decimal values, which is a technique commonly used in mobile devices. The aim of this book is to act as a knowledge base and reference guide for digital forensic practitioners who need knowledge about a specific file system or file format. It is also hoped to provide useful insight and knowledge for students or other aspiring professionals who want to work within the field of digital forensics. The book is written with the assumption that the reader will have some existing knowledge and understanding about computers, mobile devices, file systems and file formats.
540 _aCreative Commons
_fby/4.0/
_2cc
546 _aEnglish
650 0 _aПрограммирование
_2bicssc
_91403
650 0 _aКриптография, безопасность
_2bicssc
_92233
653 _aMobile File Systems
653 _aMobile File Formats
653 _aData Security
653 _aAPFS
653 _aExt4
653 _aF2FS
653 _aQNX6
653 _aSQLite
653 _aJava Serialization
653 _aRealm db
653 _aEU Project FORMOBILE
653 _aProperty Lists
700 1 _aPawlaszczyk, Dirk
_4edt
700 1 _aHummert, Christian
_4oth
700 1 _aPawlaszczyk, Dirk
_4oth
856 4 0 _awww.oapen.org
_uhttps://directory.doabooks.org/handle/20.500.12854/81695
_70
_zDescription
909 _c4
_dDarya Shvetsova
942 _2udc
_cEE
999 _c6234
_d6234