Book Image

Mastering Mobile Forensics

By : Soufiane Tahiri
Book Image

Mastering Mobile Forensics

By: Soufiane Tahiri

Overview of this book

Mobile forensics presents a real challenge to the forensic community due to the fast and unstoppable changes in technology. This book aims to provide the forensic community an in-depth insight into mobile forensic techniques when it comes to deal with recent smartphones operating systems Starting with a brief overview of forensic strategies and investigation procedures, you will understand the concepts of file carving, GPS analysis, and string analyzing. You will also see the difference between encryption, encoding, and hashing methods and get to grips with the fundamentals of reverse code engineering. Next, the book will walk you through the iOS, Android and Windows Phone architectures and filesystem, followed by showing you various forensic approaches and data gathering techniques. You will also explore advanced forensic techniques and find out how to deal with third-applications using case studies. The book will help you master data acquisition on Windows Phone 8. By the end of this book, you will be acquainted with best practices and the different models used in mobile forensics.
Table of Contents (14 chapters)
Mastering Mobile Forensics
About the Author
About the Reviewer
Preparing a Mobile Forensic Workstation

Encryption versus encoding versus hashing

Encryption, encoding, and hashing are quite confusing notions. Without digging very deep into the mathematical dimension, we will see the difference between all of these notions, keeping in mind that all of them transform data from one given format to another. The most important aspect to note is that the encryption and encoding functions are reversible but hashing is not.


Encryption is a method or a set of methods for scrambling data. The process of encrypting aims to transform plaintext information by means of a given algorithm, referred to as cipher, to produce obscure/scrambled data, referred to as ciphertext. The process of encryption requires the use of a key to both encrypt plaintext and to decrypt ciphertext. The main differences between encryption and hashing are the fact that in contrast to hashing algorithms, encryption algorithms do not produce fixed length outputs, and encrypted data can be reversed back into the original format...