+ All Categories
Home > Technology > Smart phone and mobile phone risks

Smart phone and mobile phone risks

Date post: 12-Nov-2014
Category:
Upload: grant-thornton-uk-llp
View: 1,965 times
Download: 1 times
Share this document with a friend
Description:
Your mobile knows a lot about you and that brings a number of business risks – security breaches from company data held in emails or business apps, for example. We highlight the data and security risks of the phone in your pocket. - See more at: http://www.grant-thornton.co.uk/en/Thinking/Beware-the-secrets-held-in-your-smartphone-/?previouspage=7260
Popular Tags:
45
2013 Grant Thornton UK LLP. All rights reserved. 2013 Grant Thornton UK LLP. All rights reserved. Smarter Than You Think - a look at the evidence available from smart phones and mobile devices 26 June 2013
Transcript
Page 1: Smart phone and mobile phone risks

© 2013 Grant Thornton UK LLP. All rights reserved.© 2013 Grant Thornton UK LLP. All rights reserved.

Smarter Than You Think - a look at the evidence available from

smart phones and mobile devices

26 June 2013

Page 2: Smart phone and mobile phone risks

Agenda

• Introduction

• Range of mobile devices available

• Types of data

• Case studies

• GPS and Geotagging

Page 3: Smart phone and mobile phone risks

Agenda

• Mobile Apps

• The future of mobile devices

• Relationship with other digital

disciplines

• Questions?

• Recent press articles

Page 4: Smart phone and mobile phone risks

Introduction

Page 5: Smart phone and mobile phone risks

Mobile Devices

• Embedded and reliant on mobile devices in our everyday lives – work, personal and leisure.

• Mobile devices often overlooked as a source of potential evidence - awareness level for police constabularies and criminal investigations.

• Individuals often unaware of hidden data stored!• Example – Audience participation with BlackBerry

devices – Event Log

Page 6: Smart phone and mobile phone risks

How else are mobile devices used?

Page 7: Smart phone and mobile phone risks

Mobile Devices - Popularity

• Research Firm Gartner – Suggest PC's are on the decline

• Not a dip caused by squeeze on household incomes

• 1.9 billion mobile devices to be sold in 2013, where 1 billion estimated will be smart phones

• Social media access – Twitter feeds embedded into Bloomberg terminals at traders desks. Goes against the grain for reluctance of firms to allow access

Page 8: Smart phone and mobile phone risks

Manufacturers all have different OS causing complicating forensic investigations

Page 9: Smart phone and mobile phone risks

Why Mobile Device Investigations

• Criminal & civil law examples - murder, sexual assault, violent crime, burglary, intent – sabotage and collusion, illicit images of children, financial fraud, commercial espionage, money laundering, and HR related issues.

• Examinations need to be forensically sound to stand up in court with robust procedures (ACPO guidelines).

• Recovery of deleted data.• Recovery of data from damaged mobile devices.

Page 10: Smart phone and mobile phone risks

© 2013 Grant Thornton UK LLP. All rights reserved.

• SIM cards• Mobile Phone• Memory Card• USB dongle • Tablets• Watch phone

Range of mobile devices & components

Page 11: Smart phone and mobile phone risks

Why Mobile Device Investigations

• SIM cards – Subscriber data used to obtain billing records, contacts, call data, text messages.

• Handset – Typically contacts, call logs, SMS text messages, MMS, emails, Internet history, Social Media, WiFi, Bluetooth, App data, Media (photos, videos and audio), voicemails (selected smart phones only), organiser information, eDocs, metadata and custom dictionary.

• Memory cards – Typically media and backup of phone data

Page 12: Smart phone and mobile phone risks

Types of Data

User created

Page 13: Smart phone and mobile phone risks

Computer versus the Smart Phone – Any difference?

Page 14: Smart phone and mobile phone risks

Case Studies

Page 15: Smart phone and mobile phone risks

Examples

• Counterfeit and money laundering case – Suspect unhelpful in investigation and unwilling to provide handset code to device.

• Commercial espionage – Individual hid data on memory card under phone casing.

• Intelligence – Individual identified with fake passport at airport. Handset examined to assist in identity.

Page 16: Smart phone and mobile phone risks

GPS and Geotagging

Page 17: Smart phone and mobile phone risks

Definitions and Problems

• Global Positioning System (GPS) – activated on handset to locate geographical position.

• Geotagging – adding metadata to media file.• How accurate especially in large cities?• Security issues – giving away location?• Social media issues – privacy and public domain?• False GPS co-ordinates can be generated by user.• Geotags can be edited to give false information.

Page 18: Smart phone and mobile phone risks

How easy is it?

Page 19: Smart phone and mobile phone risks

Hypothetical Situations?

• Possible to frame innocent parties eg loading edited photo with fake co-ordinates to unsecured phone or website and tip off police.

• Uploading of images to smart phone by military personnel – subsequently transferred to social media site. Potentially giving enemy access to location.

Page 20: Smart phone and mobile phone risks

Applications (Apps)

Page 21: Smart phone and mobile phone risks

What is an App?

• An "App" is an application - software designed to run on a mobile device with limited function.

• Shortcut to popular web based sites eg email.• 50 Billion Apps have been downloaded from the

Apple store alone.• Equates to 7 apps per person on the planet.• 800 Apps per second are downloaded from Apple.• Data can be forensically retrieved from some Apps

–but not all, due to the vast array encountered.

Page 22: Smart phone and mobile phone risks

What information is held?

- Emails- Location- Social Media- Personal information- Degrees of contact- Web-based data

Page 23: Smart phone and mobile phone risks

Security Apps – problems for the investigator?

Applications securing transmission of data to and from the handset

Page 24: Smart phone and mobile phone risks

The Future…..

Page 25: Smart phone and mobile phone risks

Near Field Communication (NFC) – 4G handsets

Page 26: Smart phone and mobile phone risks

Google Glasses

How will data be able to be extracted and forensically obtained?

Types of Data – GPS, pairing with mobile devices, microphone, facial recognition?

Page 27: Smart phone and mobile phone risks

Relationship with Computer Forensics and eDisclosure

Page 28: Smart phone and mobile phone risks

Computer Forensics

- Mobile devices synchronised with other electronic devices

- Even without a physical mobile device, backups can exist on PC's for examination

- Cloud based services

Page 29: Smart phone and mobile phone risks

© 2013 Grant Thornton UK LLP. All rights reserved.

eDisclosure Trends

• Increasing use of social media

• Proactive information management

• Ever increasing volumes of data

• Further disparate sources of data

• Thousands of emails can be extracted from smart phones – easy method to screen data via eDisclosure review platforms

Page 30: Smart phone and mobile phone risks

© 2013 Grant Thornton UK LLP. All rights reserved.© 2013 Grant Thornton UK LLP. All rights reserved.

Any Questions?

Page 31: Smart phone and mobile phone risks

UK Newspaper Articles

Examples of mobile devices and their evidential use

Page 32: Smart phone and mobile phone risks

Mobile Devices in the News – Extracts from the UK Press

Page 33: Smart phone and mobile phone risks

Mobile Devices in the News

Page 34: Smart phone and mobile phone risks

Mobile Devices in the News

Page 35: Smart phone and mobile phone risks

Mobile Devices in the News

Page 36: Smart phone and mobile phone risks

Mobile Devices in the News

Page 37: Smart phone and mobile phone risks

Mobile Devices in the News

Page 38: Smart phone and mobile phone risks

Mobile Devices in the News

Page 39: Smart phone and mobile phone risks

Mobile Devices in the News

Page 40: Smart phone and mobile phone risks

Mobile Devices in the News

Page 41: Smart phone and mobile phone risks

Mobile Devices in the News

Page 42: Smart phone and mobile phone risks

Mobile Devices in the News

Page 43: Smart phone and mobile phone risks

Mobile Devices in the News

Page 44: Smart phone and mobile phone risks

Mobile Devices in the News

Page 45: Smart phone and mobile phone risks

© 2013 Grant Thornton UK LLP. All rights reserved.

Contact

Chris Clements

Partner and Head of UK Regions Forensic & Investigation Services

+44 (0) 7968 33 88 [email protected]

Bruce Keeble

ExecutiveForensic & Investigation Services+44 (0)7891 433 223 [email protected]


Recommended