Mobile Phones A New Frontier in Digital Forensics

1. Mobile Phones A New Frontier in Digital Forensics BK Forensics

2. Cell phones have become an increasing source of evidence in criminal cases. Cell phones have become robust devices for storing and managing user data. MP3 players Camera/pictures Video devices Much more! Cell Phones and Crime • Address Book • Email • Text messages • Calendars

3. Obstacles in Analysis • There are many obstacles to examining cell phones: • Proprietary operating systems specific to each manufacturer. • Various data storage methods • Multiple connectivity and communication protocols

4. What are the Solutions ? • BKForensics: Offering cell phone forensic solutions since 2003 • Providing research, development, training and support specifically in cell phone forensics • Professionally staffed by active and retired law enforcement, academic and private sector professionals knowledgeable in criminal investigations and digital forensics • BKForensics offers complete cell phone forensic solutions • Training • Software • Hardware • Support • Largest list group dedicated to LE and security professionals

5. Training • Cell Phone Forensics 101 • Covering the basic fundamentals of cell phone operations and best practices • The course is NOT a “How to use our software” lesson • It is a true hands-on, tool-agnostic approach • In 2007 BKForensics trained over 80 state and local law enforcement officers • Course continually changes to address current technology • Attendees learn: • Terminology and Cell phone communication principles • SIM analysis and data recovery • Logical analysis and interpretation • Physical acquisition and date interpretation methods • Attendees Receive over $1000 in equipment: • Hardware and cables to acquire over 200 cell phones: (logical and physical) • Cell Phone Analyzer, Image recovery software, student CD • Tools for disassembly of phones and a comprehensive manual

6. NIJ Success • BKForensics took immediate action with NIJ funds • Within three weeks of the grant award CPA was released • BK continually updates the makes and models of devices we support to reflect the devices most often encountered by LEOs in the field • CPA is currently the only software that automates “flash” file interpretation from a multiple devices, providing repeatable results much sooner • Free assistance to LE in all active investigations involving the examination of a cell phone • Free technical support to all law enforcement

7. Success Stories • CPA and BKForensics assists working investigators in the field every day. • Here are three recent examples • Orlando, FL PD: Examination of a cell phone produced picture of homicide weapon (gun) matching the weapon found near the crime scene. The case was several years old and no further information was available. The development of CPA allowed extraction of the image resulting in a conviction for homicide • Philadelphia PD/SVU: Examination of a cell phone produced images resulting in an admission of sexual harassment, prior analysis had produced no useable results • International: CPA has assisted in the interpretation of phone data related to a recent, well-publicized terrorist investigation in Europe

8. Conclusion • Without NIJ support we would be unable keep our software and training current; LEOs would not be able to recover data from the most modern devices • It is necessary to identify cell phone forensics as a separate discipline from computer forensics • Our Company’s Goals • Support for state and local LEOs; offering tools and training that are applicable, affordable and current • Accessible, ongoing support for investigators post-training

9. Thanks to NIJ WWW.BKForencis.com Info@BKForencis.com 888.781.7178 PO Box 205 Warrington, PA 18976 Presenter: Brian Wolfinger- Instructor