검색 상세

Open Platform-Based File System Forensics

초록/요약

Currently, various devices that are combined with IoT technology are being developed, and research on the development of devices continues. These IoT devices occupy many parts of our lives, such as smart phones, vehicles, and industries. However, as IoT devices are rapidly spreading, new attacks are occurring against them. In particular, due to the environmental characteristics in which various devices are connected to the Internet, great damage may occur to the user in the event of an attack. In addition, research on devices is essential because data stored on IoT devices can be important evidence and alibi in the event of a crime. However, due to the nature of IoT devices, there are many small products, and it is difficult to extract data through general methods due to the installation of various platforms. To solve these problems, research on improving the security of IoT devices and obtaining data is underway, but constant research is required because the types of IoT devices are very diverse and new products are continuously released. In addition, research is needed to obtain more data and contribute to security improvement through analysis at the file system stage on the device, not just the analysis of the device. Therefore, in this study, analysis is conducted on various platforms used in IoT devices. The platforms used in the study were Tizen, Linux, and AAOS, and the platforms installed in IoT used in various fields were selected. In this study, it is possible to improve the security of the platform by identifying the file system used for each platform and analyzing metadata. We also propose a data extraction plan based on the analyzed metadata, and analyze the recoverability of the deleted data.

more

목차

Chapter 1 Introduction 1
Chapter 2 Background and Related work 3
1. Digital Forensics 3
A. Data Extract 3
B. Data Carving 5
C. Data Analyze 5
2. Platform 6
3. Digital Forensics in IoT devices 7
Chapter 3 Platform feature 10
1. Tizen(VDFS) 10
2. Linux(JFFS2/UBIFS) 12
3. AAOS(ext4) 14
Chapter 4 Metadata analyze & Data extract 16
1. Tizen(VDFS) 16
2. Linux(JFFS2/UBIFS) 19
3. AAOS(Ext4) 24
Chapter 5 Deleted data recovery 27
1. Tizen(VDFS) 27
2. Linux(JFFS2/UBIFS) 28
3. AAOS(ext4) 29
Chapter 6 Discussion 30
Chapter 7 Conclusion and Future work 31
References 33

more