Mobile Phones A New Frontier in Digital Forensics

1
Mobile Phones A New Frontier in Digital Forensics

• BK Forensics

2
Cell Phones and Crime

• Cell phones have become an increasing source of
  evidence in criminal cases.
• Cell phones have become robust devices for
  storing and managing user data.

• MP3 players
• Camera/pictures
• Video devices
• Much more!

• Address Book
• Email
• Text messages
• Calendars

3
Obstacles in Analysis

• There are many obstacles to examining cell
  phones
• Proprietary operating systems specific to each
  manufacturer.
• Various data storage methods
• Multiple connectivity and communication protocols

4
What are the Solutions ?

• BKForensics Offering cell phone forensic
  solutions since 2003
• Providing research, development, training and
  support specifically in cell phone forensics
• Professionally staffed by active and retired law
  enforcement, academic and private sector
  professionals knowledgeable in criminal
  investigations and digital forensics
• BKForensics offers complete cell phone forensic
  solutions
• Training
• Software
• Hardware
• Support
• Largest list group dedicated to LE and security
  professionals

5
Training

• Cell Phone Forensics 101
• Covering the basic fundamentals of cell phone
  operations and best practices
• The course is NOT a How to use our software
  lesson
• It is a true hands-on, tool-agnostic approach
• In 2007 BKForensics trained over 80 state and
  local law enforcement officers
• Course continually changes to address current
  technology
• Attendees learn
• Terminology and Cell phone communication
  principles
• SIM analysis and data recovery
• Logical analysis and interpretation
• Physical acquisition and date interpretation
  methods
• Attendees Receive over 1000 in equipment
• Hardware and cables to acquire over 200 cell
  phones (logical and physical)
• Cell Phone Analyzer, Image recovery software,
  student CD
• Tools for disassembly of phones and a
  comprehensive manual

6
NIJ Success

• BKForensics took immediate action with NIJ funds
• Within three weeks of the grant award CPA was
  released
• BK continually updates the makes and models of
  devices we support to reflect the devices most
  often encountered by LEOs in the field
• CPA is currently the only software that automates
  flash file interpretation from a multiple
  devices, providing repeatable results much sooner
• Free assistance to LE in all active
  investigations involving the examination of a
  cell phone
• Free technical support to all law enforcement

7
Success Stories

• CPA and BKForensics assists working investigators
  in the field every day.
• Here are three recent examples
• Orlando, FL PD Examination of a cell phone
  produced picture of homicide weapon (gun)
  matching the weapon found near the crime scene.
  The case was several years old and no further
  information was available. The development of CPA
  allowed extraction of the image resulting in a
  conviction for homicide
• Philadelphia PD/SVU Examination of a cell phone
  produced images resulting in an admission of
  sexual harassment, prior analysis had produced no
  useable results
• International CPA has assisted in the
  interpretation of phone data related to a recent,
  well-publicized terrorist investigation in Europe

8
Conclusion

• Without NIJ support we would be unable keep our
  software and training current LEOs would not be
  able to recover data from the most modern devices
• It is necessary to identify cell phone forensics
  as a separate discipline from computer forensics
• Our Companys Goals
• Support for state and local LEOs offering tools
  and training that are applicable, affordable and
  current
• Accessible, ongoing support for investigators
  post-training

9
Thanks to NIJ

• WWW.BKForencis.com
• Info_at_BKForencis.com
• 888.781.7178
• PO Box 205
• Warrington, PA 18976
• Presenter Brian Wolfinger- Instructor