dc.contributor.author | Schwamm, Riqui | |
dc.contributor.author | Rowe, Neil C. | |
dc.date | 2014 | |
dc.date.accessioned | 2016-07-27T17:57:43Z | |
dc.date.available | 2016-07-27T17:57:43Z | |
dc.date.issued | 2014 | |
dc.identifier.citation | Schwamm, Riqui, and Neil C. Rowe. "Effects of the factory reset on mobile devices." Journal of Digital Forensics, Security and Law 9.2 (2014): 205-220. | en_US |
dc.identifier.uri | http://hdl.handle.net/10945/49294 | |
dc.description.abstract | Mobile devices usually provide a “factory-reset” tool to erase user-specific data from the main
secondary storage. 9 Apple iPhones, 10 Android devices, and 2 BlackBerry devices were tested
in the first systematic evaluation of the effectiveness of factory resets. Tests used the Cellebrite
UME-36 Pro with the UFED Physical Analyzer, the Bulk Extractor open-source tool, and our
own programs for extracting metadata, classifying file paths, and comparing them between
images. Two phones were subjected to more detailed analysis. Results showed that many kinds
of data were removed by the resets, but much user-specific configuration data was left. Android
devices did poorly at removing user documents and media, and occasional surprising user data
was left on all devices including photo images, audio, documents, phone numbers, email
addresses, geolocation data, configuration data, and keys. A conclusion is that reset devices can
still provide some useful information to a forensic investigation. | en_US |
dc.format.extent | 16 p. | en_US |
dc.publisher | ADFSL | en_US |
dc.rights | This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States. | en_US |
dc.title | Effects of the Factory Reset on Mobile Devices | en_US |
dc.type | Article | en_US |
dc.contributor.corporate | Naval Postgraduate School (U.S.) | en_US |
dc.contributor.department | Computer Science (CS) | en_US |
dc.subject.author | mobile device | en_US |
dc.subject.author | forensics | en_US |
dc.subject.author | factory reset | en_US |
dc.subject.author | file types | en_US |
dc.subject.author | Cellebrite | en_US |
dc.subject.author | privacy | en_US |