Leveraging usb power delivery implementations for digital forensic acquisition - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Leveraging usb power delivery implementations for digital forensic acquisition

Résumé

Modern consumer devices present major challenges in digital forensic investigations due to security mechanisms that protect user data. The entire physical attack surface of a seized device such as a mobile phone must be considered in an effort to acquire data of forensic value.Several USB protocols have been introduced in recent years, including Power Delivery, which enables negotiations of power delivery to or from attached devices. A key feature is that the protocol is handled by dedicated hardware that is beyond the control of the device operating systems. This self-contained design is a security liability with its own attack surface and undocumented trust relationships with other peripherals and the main system-on-chips.This chapter presents a methodology for vulnerability discovery in USB Power Delivery implementations for Apple devices. The protocol and Apple-specific communications are reverse engineered, along with the firmware of the dedicated USB Power Delivery hardware. The investigation of the attack surface and potential security vulnerabilities can facilitate data acquisition in digital forensic investigations.
Fichier principal
Vignette du fichier
522103_1_En_6_Reference.pdf (464.98 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03764370 , version 1 (31-08-2022)

Licence

Identifiants

Citer

Gunnar Alendal, Stefan Axelsson, Geir Olav Dyrkolbotn. Leveraging usb power delivery implementations for digital forensic acquisition. 17th IFIP International Conference on Digital Forensics (DigitalForensics), Feb 2021, Virtual, China. pp.111-133, ⟨10.1007/978-3-030-88381-2_6⟩. ⟨hal-03764370⟩
41 Consultations
40 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More