<br /> Digital<br /> The Quarterly Magazine for Digital Forensics Practitioners Issue 33 · November 2017<br /> ForensicS<br /> Magazine<br /> Attacking<br /> Encryption<br /> Systems<br /> Nihad Hassan investigates how Encryption Systems<br /> might be attacked and how best to secure them<br /> PLUS<br /> Validation of Source Code<br /> Plain Text Vulnerabilities in Wearable Technologies<br /> A Triage Solution for Sex Offender Managers<br /> 9<br /> From the Lab: The Date is in The Details772042 061004<br /> 33<br /> Issue 33 / £14.99 TR Media<br /> <br /> Editorial<br /> F<br /> or over 8 years now we have investigated<br /> and probed the world of digital forensics,<br /> digital investigations and analy<a title="DF33 - Online page 1" href="http://viewer.zmags.com/publication/0744c228?page=1"> Digital The Quarterly Magazine for Digital Fore</a> <a title="DF33 - Online page 2" href="http://viewer.zmags.com/publication/0744c228?page=2"> </a> <a title="DF33 - Online page 3" href="http://viewer.zmags.com/publication/0744c228?page=3"> Editorial F </a> <a title="DF33 - Online page 4" href="http://viewer.zmags.com/publication/0744c228?page=4"> </a> <a title="DF33 - Online page 5" href="http://viewer.zmags.com/publication/0744c228?page=5"> Contents FEATURES 8 Source Code Verification Does</a> <a title="DF33 - Online page 6" href="http://viewer.zmags.com/publication/0744c228?page=6"> NEWS News Education Sector Rivals Tech Industry </a> <a title="DF33 - Online page 7" href="http://viewer.zmags.com/publication/0744c228?page=7"> We look forward to seeing how the finalists fare i</a> <a title="DF33 - Online page 8" href="http://viewer.zmags.com/publication/0744c228?page=8"> FEATURE ENTRY Validation of Source Code used for</a> <a title="DF33 - Online page 9" href="http://viewer.zmags.com/publication/0744c228?page=9"> Secondary to the two guidelines above, a lan</a> <a title="DF33 - Online page 10" href="http://viewer.zmags.com/publication/0744c228?page=10"> FEATURE ENTRY flawed. Why then are we leaning </a> <a title="DF33 - Online page 11" href="http://viewer.zmags.com/publication/0744c228?page=11"> Cycle (SDLC). Don’t get me wrong the list below i</a> <a title="DF33 - Online page 12" href="http://viewer.zmags.com/publication/0744c228?page=12"> FEATURE ENTRY Figure </a> <a title="DF33 - Online page 13" href="http://viewer.zmags.com/publication/0744c228?page=13"> </a> <a title="DF33 - Online page 14" href="http://viewer.zmags.com/publication/0744c228?page=14"> MAIN FEATURE ADVANCED Attacking Encryption Syste</a> <a title="DF33 - Online page 15" href="http://viewer.zmags.com/publication/0744c228?page=15"> What is a Trusted Platform Module (TPM)? TPM is a</a> <a title="DF33 - Online page 16" href="http://viewer.zmags.com/publication/0744c228?page=16"> MAIN FEATURE ADVANCED a Trusted Platform Modu</a> <a title="DF33 - Online page 17" href="http://viewer.zmags.com/publication/0744c228?page=17"> It may be executed against pre-boot authenti</a> <a title="DF33 - Online page 18" href="http://viewer.zmags.com/publication/0744c228?page=18"> MAIN FEATURE ADVANCED bootloader. As par</a> <a title="DF33 - Online page 19" href="http://viewer.zmags.com/publication/0744c228?page=19"> a) Control Panel > System > Advanced system </a> <a title="DF33 - Online page 20" href="http://viewer.zmags.com/publication/0744c228?page=20"> </a> <a title="DF33 - Online page 21" href="http://viewer.zmags.com/publication/0744c228?page=21"> LEGAL Editorial I n an earlier is</a> <a title="DF33 - Online page 22" href="http://viewer.zmags.com/publication/0744c228?page=22"> LEGAL FEATURE Scraping = Hacking? Scott Zimmerma</a> <a title="DF33 - Online page 23" href="http://viewer.zmags.com/publication/0744c228?page=23"> “unauthorized” activity. In a few words, if an in</a> <a title="DF33 - Online page 24" href="http://viewer.zmags.com/publication/0744c228?page=24"> LEGAL FEATURE Promissory Estoppel The motion f</a> <a title="DF33 - Online page 25" href="http://viewer.zmags.com/publication/0744c228?page=25"> Yes, this description is quite old but it is</a> <a title="DF33 - Online page 26" href="http://viewer.zmags.com/publication/0744c228?page=26"> LEGAL NEWS LEGAL News US Department of Justice is</a> <a title="DF33 - Online page 27" href="http://viewer.zmags.com/publication/0744c228?page=27"> </a> <a title="DF33 - Online page 28" href="http://viewer.zmags.com/publication/0744c228?page=28"> FROM THE LAB ADVANCED The Date is in The Detail</a> <a title="DF33 - Online page 29" href="http://viewer.zmags.com/publication/0744c228?page=29"> From a forensics standpoint, many of us are </a> <a title="DF33 - Online page 30" href="http://viewer.zmags.com/publication/0744c228?page=30"> FROM THE LAB ADVANCED Callout 3 – Unique ID He</a> <a title="DF33 - Online page 31" href="http://viewer.zmags.com/publication/0744c228?page=31"> </a> <a title="DF33 - Online page 32" href="http://viewer.zmags.com/publication/0744c228?page=32"> FROM THE LAB ADVANCED For pur</a> <a title="DF33 - Online page 33" href="http://viewer.zmags.com/publication/0744c228?page=33"> embedded in the Message-ID, and that the Message-</a> <a title="DF33 - Online page 34" href="http://viewer.zmags.com/publication/0744c228?page=34"> FROM THE LAB ADVANCED Having </a> <a title="DF33 - Online page 35" href="http://viewer.zmags.com/publication/0744c228?page=35"> </a> <a title="DF33 - Online page 36" href="http://viewer.zmags.com/publication/0744c228?page=36"> FEATURE INTERMEDIATE Plain Text Vulnerabilities</a> <a title="DF33 - Online page 37" href="http://viewer.zmags.com/publication/0744c228?page=37"> Wearable Devices Wearable devices have been popul</a> <a title="DF33 - Online page 38" href="http://viewer.zmags.com/publication/0744c228?page=38"> FEATURE INTERMEDIATE wearable device may expe</a> <a title="DF33 - Online page 39" href="http://viewer.zmags.com/publication/0744c228?page=39"> </a> <a title="DF33 - Online page 40" href="http://viewer.zmags.com/publication/0744c228?page=40"> FEATURE INTERMEDIATE Figure 3. A Plain </a> <a title="DF33 - Online page 41" href="http://viewer.zmags.com/publication/0744c228?page=41"> connection request and response. The remainder of</a> <a title="DF33 - Online page 42" href="http://viewer.zmags.com/publication/0744c228?page=42"> FEATURE INTERMEDIATE Figure 5. Thre</a> <a title="DF33 - Online page 43" href="http://viewer.zmags.com/publication/0744c228?page=43"> </a> <a title="DF33 - Online page 44" href="http://viewer.zmags.com/publication/0744c228?page=44"> FEATURE ENTRY A Triage Solution for Sex Offender</a> <a title="DF33 - Online page 45" href="http://viewer.zmags.com/publication/0744c228?page=45"> Web Histories Internet histories are stored in a </a> <a title="DF33 - Online page 46" href="http://viewer.zmags.com/publication/0744c228?page=46"> FEATURE ENTRY time performed by the resi</a> <a title="DF33 - Online page 47" href="http://viewer.zmags.com/publication/0744c228?page=47"> Each requirement has a specific purpose for t</a> <a title="DF33 - Online page 48" href="http://viewer.zmags.com/publication/0744c228?page=48"> FEATURE ENTRY </a> <a title="DF33 - Online page 49" href="http://viewer.zmags.com/publication/0744c228?page=49"> </a> <a title="DF33 - Online page 50" href="http://viewer.zmags.com/publication/0744c228?page=50"> ADVETORIAL UNIVERSITY OF WARWICK CYBER SECURITY, </a> <a title="DF33 - Online page 51" href="http://viewer.zmags.com/publication/0744c228?page=51"> 51</a> <a title="DF33 - Online page 52" href="http://viewer.zmags.com/publication/0744c228?page=52"> MORE THAN A MAG Digital Forensics Magazine prides</a> <a title="DF33 - Online page 53" href="http://viewer.zmags.com/publication/0744c228?page=53"> </a> <a title="DF33 - Online page 54" href="http://viewer.zmags.com/publication/0744c228?page=54"> FEATURE ENTRY Seeing Beyond The Image Martino J</a> <a title="DF33 - Online page 55" href="http://viewer.zmags.com/publication/0744c228?page=55"> Exif Exchangeable image file format is a standard </a> <a title="DF33 - Online page 56" href="http://viewer.zmags.com/publication/0744c228?page=56"> FEATURE ENTRY Fi</a> <a title="DF33 - Online page 57" href="http://viewer.zmags.com/publication/0744c228?page=57"> Figure 3 Is The Image Coming From A Specific Dev</a> <a title="DF33 - Online page 58" href="http://viewer.zmags.com/publication/0744c228?page=58"> FEATURE ENTRY Figure 4 </a> <a title="DF33 - Online page 59" href="http://viewer.zmags.com/publication/0744c228?page=59"> Figure 5 and not just in lab conditions, are fe</a> <a title="DF33 - Online page 60" href="http://viewer.zmags.com/publication/0744c228?page=60"> COMPETITION Competition Fancy winning a nifty li</a> <a title="DF33 - Online page 61" href="http://viewer.zmags.com/publication/0744c228?page=61"> </a> <a title="DF33 - Online page 62" href="http://viewer.zmags.com/publication/0744c228?page=62"> FEATURE ADVANCED Extracting Data from Android's </a> <a title="DF33 - Online page 63" href="http://viewer.zmags.com/publication/0744c228?page=63"> Figure 1. Illustration of Experiment Setup th</a> <a title="DF33 - Online page 64" href="http://viewer.zmags.com/publication/0744c228?page=64"> FEATURE ADVANCED Artefacts from WhatsAp</a> <a title="DF33 - Online page 65" href="http://viewer.zmags.com/publication/0744c228?page=65"> Figure 8 WhatsApp Data </a> <a title="DF33 - Online page 66" href="http://viewer.zmags.com/publication/0744c228?page=66"> FEATURE ADVANCED Figure 10. S</a> <a title="DF33 - Online page 67" href="http://viewer.zmags.com/publication/0744c228?page=67"> Continuous Application Updates. The developers of</a> <a title="DF33 - Online page 68" href="http://viewer.zmags.com/publication/0744c228?page=68"> </a> <a title="DF33 - Online page 69" href="http://viewer.zmags.com/publication/0744c228?page=69"> NEXT ISSUE NEXT Issue Continuing our aim of bring</a> <a title="DF33 - Online page 70" href="http://viewer.zmags.com/publication/0744c228?page=70"> 360 36 Letters, emails, tweets, connections and m</a> <a title="DF33 - Online page 71" href="http://viewer.zmags.com/publication/0744c228?page=71"> TWITTER We are regularly tweeting tools, tips and</a> <a title="DF33 - Online page 72" href="http://viewer.zmags.com/publication/0744c228?page=72"> </a> <a title="DF33 - Online page 73" href="http://viewer.zmags.com/publication/0744c228?page=73"> BOOK Reviews W </a> <a title="DF33 - Online page 74" href="http://viewer.zmags.com/publication/0744c228?page=74"> REVIEWS BOOKS T hi</a> <a title="DF33 - Online page 75" href="http://viewer.zmags.com/publication/0744c228?page=75"> A n excellent bo</a> <a title="DF33 - Online page 76" href="http://viewer.zmags.com/publication/0744c228?page=76"> REVIEWS BOOKS T hi</a> <a title="DF33 - Online page 77" href="http://viewer.zmags.com/publication/0744c228?page=77"> BACK ISSUES BACK Issues Digital The Quarterly M</a> <a title="DF33 - Online page 78" href="http://viewer.zmags.com/publication/0744c228?page=78"> R ecent news headlin</a> <a title="DF33 - Online page 79" href="http://viewer.zmags.com/publication/0744c228?page=79"> </a> <a title="DF33 - Online page 80" href="http://viewer.zmags.com/publication/0744c228?page=80"> </a>