Overview of Mac system security and its impact on digital forensics process

prošireni sažetak izlaganja sa skupa

prošireni sažetak izlaganja sa skupa

Overview of Mac system security and its impact on digital forensics process

Vrsta prilog sa skupa (u zborniku)
Tip prošireni sažetak izlaganja sa skupa
Godina 2020
Nadređena publikacija 2020 43rd International Convention on Information, Communication and Electronic Technology (MIPRO)
Stranice str. 1236-1241
DOI 10.23919/mipro48935.2020.9245397
ISSN 2623-8764
Status objavljeno

Sažetak

Nowadays there are 3 main operating systems used, and Mac OS is one of them. Until now Apple published many iterations of their operating system and with that introduced many new features that are related to system security. Even though security-related changes go unnoticed, in the world of digital forensics this presents a challenge. Today encryption can be implemented on both, hardware and software level, which can make imaging Mac OS difficult. Besides, security which is meant to protect, user data is also used by criminals to restrict access to their computers. This paper will focus on the differences and problems that occur while creating a forensic image and extracting data from Mac OS. On top of that this paper will depict the impact devices equipped with 'T1' or 'T2' security chip have on digital forensic process and remediation methods.

Ključne riječi

Data extraction ; Encryption ; Forensic image ; Mac OS forensics