NIST har precis släppt ett mycket intressant dokument om forensisk/rättsteknisk analys av mobiltelefoner. NIST Draft S800-101 - Guidelines on Cell Phone Forensics innehåller en gedigen genomgång av de olika typer av information som finns i en mobiltelefon, var och hur informationen lagras, hur den extraheras och hur den säkras som bevis. Dokumentets sammanfattning beskriver syftet och innehållet mde dokumentet:

Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions using accepted methods. Mobile phones, especially those with advanced capabilities, are a relatively recent phenomenon, not usually covered in classical computer forensics. This guide attempts to bridge that gap by providing an in-depth look into mobile phones and explaining the technologies involved and their relationship to forensic procedures. It covers phones with features beyond simple voice communication and text messaging and their technical and operating characteristics. This guide also discusses procedures for the preservation, acquisition, examination, analysis, and reporting of digital information present on cell phones, as well as available forensic software tools that support those activities.

The objective of the guide is twofold: to help organizations evolve appropriate policies and procedures for dealing with cell phones, and to prepare forensic specialists to contend with new circumstances involving cell phones, when they are encountered. The guide is not all-inclusive nor is it prescribing how law enforcement and incident response communities handle mobile devices during investigations or incidents. However, from the principles outlined and other information provided, organizations should nevertheless find the guide helpful in setting policies and procedures. This publication should not be, construed as legal advice. Organizations should use this guide as a starting point for developing a forensic capability in conjunction with extensive guidance provided by legal advisors, officials, and management.

 

 

Arbetar du med säkerhet för mobiltelefoner eller med rättsteknisk analys av IT-system borde detta dokument vara given läsning.