Forensic Analysis of Wearable Technology
Previously, the Leahy Center for Digital Investigations Wearables Team posted in their second blog about their progress this semester with the Samsung Galaxy Watch, the Fitbit Versa, the Garmin Fenix 5, and the Apple Watch Series 4.
A Second Datagen
The team decided it would be a good call to redo their data generation from the previous weeks to prove that the data they collected would be in the same files. The team performed a second round of data gen with the same actions as the first one. Thankfully, this round of data gen went exactly the same as the last one.
When they returned the next day, the team began the exciting process of analyzing the data. The results they got were very similar to the first round of data gen. Previous artifacts were confirmed and no new information was found within the phones. After they confirmed their findings, they decided to move on to test one new capability of the watches: mobile payments.
NFC Payment & Google Fi
The team looked into mobile payments with the Samsung Galaxy Watch using a Visa gift card. Unfortunately, the Galaxy Watch was paired up with a Google Pixel 3, and the Samsung Pay is incompatible with any phone besides another Samsung phone. As a result, the team was unable to test NFC payment on the Samsung Watch. The team was also unable to test this capability with the Fitbit versa. It is only available on the special edition, which the team did not have.
Caption: The team tested notifications with the Google Fi account by sending and receiving text messages. The team responded to some of these from the watches, but it was all available in the exported application data.
To test notifications on each of the watches, the team created a Google Fi account for the Google Pixel phones. The team used other phones to message the Google Pixel 3 phones and noted the notifications on the watches. They also performed a phone application acquisition pull for each of the paired devices to find what information was located on the phone itself.
Wrapping Up…
As the team wraps up their work on the Samsung Galaxy Watch and Fitbit Versa, they look forward to working with the last two devices: the Apple Watch Series 4 and the Garmin Fenix. They plan on following a similar methodology to the Fitbit and Galaxy watches, create data, and pull the applications from their respective devices in order to examine and analyze the watches. They’ll be posting another blog post with another status update soon, so be sure to check us out on Twitter @ChampForensics, Instagram@ChampForensics, and Facebook@ChamplainLCDI to keep up to date with our progress!