Forensic Tools for Mobile Phone
Subscriber Identity Modules
 

Wayne Jansen
National Institute of Standards and Technology
wjansen@NIST.gov
 

Rick Ayers
National Institute of Standards and Technology
rayers@NIST.gov
 

ABSTRACT

Mobile phones and other handheld devices incorporating cellular capabilities, such as Personal Digital Assistants, are ubiquitous. Besides placing calls, these devices allow users to perform other useful tasks, including text messaging and phonebook entry management. When cell phones and cellular devices are involved in a crime or other incident, forensic specialists require tools that allow the proper retrieval and speedy examination of data present on the device. For devices conforming to the Global System for Mobile Communications (GSM) standards, certain data such as dialed numbers, text messages, and phonebook entries are maintained on a Subscriber Identity Module (SIM). This paper gives a snapshot of the state of the art of forensic software tools for SIMs and an explanation of the types of digital evidence they can recover.¹

Keywords: Mobile Phone, Forensic Tool, Subscriber Identity Module

1. Certain commercial products and trade names are identified in this paper to illustrate technical concepts. However, it does not imply a recommendation or an endorsement by NIST.