Damaged Device Forensics of Vehicle Event Data Recorders and Mobile Devices.
2022-01-1016
03/29/2022
- Event
- Content
- Over the past two decades, digital data stored within vehicle systems has been highly useful in determining the events leading to a crash, especially when combined with traditional accident reconstruction techniques. With the proliferation of Internet of Things (IOT), the sources of that data have grown exponentially and techniques for applying that data have been refined and expanded. These sources of data range from engine control modules (ECM), airbag control modules (ACM), infotainment modules, telematics modules, and mobile devices. For these reasons, the demand for successful retrieval of vehicle systems data is increasing. Severe crashes are no exception and often present a unique challenge to reconstruction experts because these vehicle system modules - which contain the crash data - are often damaged in serious crashes. When the modules themselves are damaged; whether it be physical, fire, or water damage; standard techniques for data retrieval may be impossible without performing chip level forensics. Specifically, chip-swap forensics – wherein the data bearing components from a damaged module/device are transplanted onto a surrogate module/device. This presentation addresses the challenges of data retrieval from damaged vehicle system modules based on prior research and current work on the subject. It also shows the potential impact chip-swap forensics could have in meeting the challenges put forth by today’s mobile device encryption. Specifically, when damaged devices whether, mobile or vehicle systems are encrypted by the manufacturer and chip-off forensics are no longer a possibility.
- Citation
- Burgess, S., "Damaged Device Forensics of Vehicle Event Data Recorders and Mobile Devices.," SAE Technical Paper 2022-01-1016, 2022, .