Analysis of Application of Jailbreak and Root Procedures in Forensic Testing of Mobile Devices

Zbog sve boljih sigurnosnih modela implementiranih u operativnim sustavima pametnih telefona, postalo je puno teže uspješno provoditi forenzičke postupke prikupljanja i analiziranja podataka. Eskalacija privilegija je jedna od metoda koja može olakšati provođenje tih postupaka, a primjeri takve metode su root i jailbreak postupci korišteni na Android i iOS operativnim sustavima. Iako je primarni cilj navedenih postupaka jednak, zahtjevi ali i procedure obavljanja istih razlikuju se ovisno o značajkama sustava. Nedostatak ovih metoda je taj što oni mogu utjecati na integritet prikupljenih podataka i time narušiti jedan od glavnih zahtjeva forenzike, tj. zahtjev forenzičke ispravnosti. Iz tog razloga važno je detaljno dokumentirati način provođenja tih postupaka, te odrediti isplativost provođenja postupaka u svrhu forenzičke istrage.Due to ever-improving security models implemented in smartphone operating systems, it has become much more difficult to successfully conduct forensic data collection and analysis procedures. Privilege escalation is one of the methods that can be used to perform these procedures more easily and some of the examples are root and jailbreak procedures used on Android and iOS operating systems. Although the primary goal of these procedures is the same, the requirements and procedures for performing them may differ depending on the characteristics of the system. The disadvantage of these methods is that they can affect the integrity of the collected data and thus violate one of the main forensics requirements, ie forensic soundness. For this reason, it is important to document in detail the manner in which these procedures are conducted and to determine the effectiveness of conducting the procedures for the purpose of forensic investigation