Research On Forensic Method Of Ios Devices Based On Windows OS

With the popularity of mobile devices as well as highly developed smartphone operatingsystem, Apple’s iOS operation system has accounted for most of the mobile device market share. Atthe same time, the phenomenons of crime through iOS devices or as target are increasingly common.The Windows OS as the most widely used desktop operating system, so the research of digitalforensic technology and design of digital forensics system for iOS devices based on Windows OShas both strong theoretical and practical values.In this paper, through analyzing the iOS App’s basic characteristics: rapid growth and constantlyupdated, we analyzed the data from default App and the third-party download App. Combined withthe actual evidence requirements, we designed and implemented the App data acquisition moduleand analysis module that based on dynamic plug-in mechanism which flexible to adapt to thechanging needs of the App itself and digital forensics. Also analyzed two kinds of iOS devicesbackup: iTunes and iCould backup, and elaborated the access to backup data and analytical methods.On the basis of above technology, we presented fuzzy approach of iOS devices and discusses theapplication scenarios, effect of the backups’s time attribute of the method. At last, we made abackup’s time property validation methods.After obtaining the result set, for the needs of search function, we propose a matching algorithmcombined limited attribute fields search with AC multi-mode search algorithm which improvedsearch function and efficiency.Combination of these theoretical and technical points, the forensics system for iOS devices wasdesigned and implemented based on Windows OS which solve the most practical problems duringdigital forensics works.