Re: Retrieve deleted data from a mobile phone

I am aware of commercial methods used to exchange data between embedded systems and PC's. However it would appear that specialized knowledge is required to accomplish this.

The Netherlands Forensic Institute has developed a number of software tools to assist in this process. These include Cards4Labs - reading GSM SIMS and TULP - for reading mobile phones via cable or IR.

For an introductory reference to this topic I would suggest that you look for the Handbook of Computer Crime Investigations - Academic Press, Edited by E. Casey. It contains an excellent chapter on embedded systems. Some related documents are: Embedded systems checklist from C. De Becker, 2000, University of Antwerp. Smart Card Handbook, 2nd Ed, Wiley

For Palms etc. PDD is a good tool and Paraben has some PDA tools.

I would be interested if you find any commercially available tools or equipment to assist with this project, as I am considering on having some students work on such research later in the year.

Regards,

Blair Brown, CPP, CISSP, CCE
Program Coordinator - Cyber Crime
Centre for Law and Justice
Sir Sandford Fleming College
(705) 749-5530
>>> "Gary L. Palmer" <palmerg@mitre.org> 07/08/03 18:18 PM >>>
Like many others the AFRL is researching forensic analysis of cellular technology as well. If anyone is interested I will post a link to the Microchip
Technology Inc. 24LC16B serial EEPROM that is used in many cellular phones. Just
let me know. Or I will send the PDF to anyone that contacts me off-line.

Gary

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Suresh Ponnusami wrote:

> Hi,
>
> To a certain extent the numbers from dialed, received and missed calls
The
> data is stored in the phone's memory and when the power (battery) is
might
> be useful. haven't tried with other mobiles. (will be trying with
other
> handsets soon). but if the number is stored in the sim card, i don't
reflected
> immediately as well as due to the limited amount of memory available.
about
> > PDAs and mobils.I try once again to pose the question.
> >
> > Here's my question: is there the possibility to retrieve deleted
data
> > (for example a deleted telephone number from the phone book)on a
mobile
> > phone (Nokia 7110)?
> >
> > If it is not possible and you can tell me this for sure, I would be
happy
> > with it because I only need a good reason for or against this
question.
> >
> > Are there any tools which can retrieve the information I mentionded
above?
> >
> > If yes, please tell me the name of this tool(s).
> >
> > I hope sombody can answer this question.
> >
> >
> > tx Martin Meier
>
> -----------------------------------------------------------------

--
Gary Palmer                            Cellular - 407-687-3102
The MITRE Corporation         Work - 407-208-1320 x229
3504 Lake Lynda Drive          dpalmer30@sprintpcs.com
Orlando, FL. 32817                 palmerg@cfl.rr.com
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
"The riddle does not exist. If a question can be put at all, then it can
also be
answered."
Ludwig Wittgenstein, Tractatus Logico Philosophicus, New York, 1922.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
"If you don't know where you're going, any road will take you there."
George Harrison, 2002 (LP/CD: "Brainwashed")




-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com



-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com