Leveraging usb power delivery implementations for digital forensic acquisition - Advances in Digital Forensics XVII
Conference Papers Year : 2021

Leveraging usb power delivery implementations for digital forensic acquisition

Abstract

Modern consumer devices present major challenges in digital forensic investigations due to security mechanisms that protect user data. The entire physical attack surface of a seized device such as a mobile phone must be considered in an effort to acquire data of forensic value.Several USB protocols have been introduced in recent years, including Power Delivery, which enables negotiations of power delivery to or from attached devices. A key feature is that the protocol is handled by dedicated hardware that is beyond the control of the device operating systems. This self-contained design is a security liability with its own attack surface and undocumented trust relationships with other peripherals and the main system-on-chips.This chapter presents a methodology for vulnerability discovery in USB Power Delivery implementations for Apple devices. The protocol and Apple-specific communications are reverse engineered, along with the firmware of the dedicated USB Power Delivery hardware. The investigation of the attack surface and potential security vulnerabilities can facilitate data acquisition in digital forensic investigations.
Fichier principal
Vignette du fichier
522103_1_En_6_Reference.pdf (464.98 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03764370 , version 1 (31-08-2022)

Licence

Identifiers

Cite

Gunnar Alendal, Stefan Axelsson, Geir Olav Dyrkolbotn. Leveraging usb power delivery implementations for digital forensic acquisition. 17th IFIP International Conference on Digital Forensics (DigitalForensics), Feb 2021, Virtual, China. pp.111-133, ⟨10.1007/978-3-030-88381-2_6⟩. ⟨hal-03764370⟩
48 View
90 Download

Altmetric

Share

More