MOBILE DEVICE FORENSICS: COMPARISON OF MOBILE ENCRYPTION HARDWARE AND SOFTWARE

Abstract

Today, mobile devices have become indispensable tools in personal and professional spheres, which requires a high level of security for data storage and transmission. The article is devoted to a comparison of the Android and iOS platforms in the context of mobile communication encryption, as well as their use in digital forensics. The features of the architectures of these platforms, security mechanisms, Trusted Execution Environment in Android and Secure Enclave in iOS, and loading processes that affect data protection are considered. The key methods of detecting digital evidence and their effectiveness when working with open sources are analyzed. Conclusions are drawn on the advantages and disadvantages of each platform in terms of ensuring information security and forensic research. Special attention is paid to the methods of studying encrypted information, the use of AES-256 algorithms in GCM mode, as well as the capabilities of the platforms in storing and analyzing digital evidence. The study identifies the advantages and disadvantages of the data protection mechanisms of both platforms, focusing on the impact of their architecture on the effectiveness of forensic analysis. The solution of Secusmart GmbH is separately considered as an example of an integrated approach to ensuring mobile security. The study demonstrates that iOS is a more secure platform, but Android offers greater flexibility for researchers and developers. The encryption solutions offered by Secusmart GmbH confirm the importance of mobile security. Further research should have the prospect of creating innovative protection methods that take into account both the needs of users and the requirements of law enforcement agencies. It is recommended for Android to standardize security updates, and for iOS, it is key to develop protection mechanisms without degrading the user experience and the use of encryption solutions.