Week 3 - Mobile Device Components - Connectivity

Question 1

Types of Data Cables for Examination

Answer 1

Often manufacturer specific.

Serial (very old device)
USB
RJ5

Data cable connection is the quickest way to connect.
Require driver software

Question 2

Methods of Device Connection for Examination - Infra Red (IrDA)

Answer 2

Slowest method. Not commonly used.
Both devices require an infrared port (not common on modern devices).
Requires manual interaction to activate and will time out if communication is not established with another port.
Connection can fail with large amounts of data being transferred.

Some forensic tool vendors no longer support this.

Question 3

Methods of Device Connection for Examination - Bluetooth

Answer 3

Common on most modern devices.
Both devices need to support devices and have active connections.
Requires manual interaction to active and ‘pair’ the devices.

Therefore this interaction will change data on the device because the bluetooth pairing data is now stored on the device.

Results vary as to what data can be transferred by bluetooth. Some data requires a cable tranfer.

Can be seen as less secure because it is using a radio signal. However it is a short range and requires permission to interact with each other.

Provides a second option if cable port is damamged.

Question 4

Physical Examination Connections - JTAG

Answer 4

• Requires specialist communications device
• Can either use an adapter to connect to the PCB or if no adapter available will require soldering a connection to the PCB
• Maybe difficult to identify connection points, so research will be required
• May not be supported by the device vendor so cannot use.

Question 5

Physical Examination Connections - ISP

Answer 5

In System Programming connection requires direct soldering or a probe to points on the PCB.
- Maybe difficult to identify connection points, so research will be required
- Only works for certain chip technology