Hi All !
I need to do a presentation about Blackberry and its function with some people.
can anyone give me an Idea or good site to know much about blackberry & its forensic with security issue…
Thank you
C@41R
Are you looking for information on the devices? On the communication backend (BIS & BES)?
There was quite a bit written about the security when India and China wanted RIM to give them access to the Blackberry servers. However security is the bedrock of the Blackberry devices and the service and RIM declined to provide those governments access.
Actually, RIM eventually gave India the Escrow key to the RIM servers in India to allow for interception of BB communications rather than risk having their license in Inidia revoked.
AbdulCadir, from a forensic perspective - there is alot of information that can be extracted from BB devices assuming you have the handset pin code, and that if the device has not been 'remotely wiped' by an Admin. Many Mobile forensic tools such as XRY, Cellebrite, etc support data extraction from BB devices, also Imaging a device using Encase & then carving the image can yeild some useful info. If you have the suspect's laptop; then alot of info can also be gleaned via the BB backup files.
Are u looking at BB security or BB forensics?
I agree with MindSmith but added to which you need to remember also what BitHead referred, which is the backend (e.g. BES profile).
Actually, RIM eventually gave India the Escrow key to the RIM servers in India to allow for interception of BB communications rather than risk having their license in Inidia revoked.
Really? Everything I read (including articles as late as mid-'09) state that the Government of Indian dropped its request stating that the Blackberry was no longer considered a security threat.
Also bear in mind that the handset clock is a very important aspect of an examination, as this dictates whether communications stored within the handset memory are subject to the handset's own or governing BES policy's retention policy.
Most devices are set to retain data for either 30 or 60 days by default. If the device has been sat in a store for any length of time, then your decision what to do with the handset clock when you switch on may very well influence what you get back from the device.
Also to add a bit of info too, Blackberry MicroSD cards do contain thier own thumbnail database files that are hidden, incase you wanted to use that in your presentation aswell.