VOGUE-Project had been presented at D.A.CH Security 2011 in Oldenburg
Location of the yearly proceeding DACH-Security was at the EWE-Forum from 20.-21. of September. 48 talks have been organised with additional six pick-up-abstractors that might have been understudied. Topic was an interdisciplinary state-of-the-art abstract to the current status of IT-security in industry, service, administration and research in Germany, Austria, and Switzerland.
As a special, detailed aspects had been presented for scopes of research and development, teaching and further education. In the same way relevant applications had been shown and the concepts of product-developments outcome. Cause IT-security is an integrated part of nearly all information based applications and processes, contributions of legal basic conditions and its commercial factors were represented. The DECOIT GmbH presented the topically research results of the project VOGUE with the current status.
The VOGUE-Project (www.vogue-project.de) had been presented by DECOIT GmbH during the conference. Final results were shown while the project itself ends this month. In the project Android was patched to ensure Boot-security. The TPM-Emulator had been used to ensure security-relevant data and to discover, if the client had been compromised. Unfortunately a TPM-Chip has not been used cause there was no support in smartphones yet. This will change soon.
For integrating this security based architecture in business a secure platform can be set up, but at the moment only based on a defined Android-Version, while every change of this version will need a patch. Furthermore an application (App) is not able to be installed arbitrarily. Therefor the solution of VOGUE is not a standard product for populace.
The other presentation showed that there are nearly no alternatives for VOGUE. The number of smartphones increases stadily and the individual hardware supports a rank and file of informations. Therefor this is a rising line of action for forensic scientists.
iPhone 3G was had been used daily over a period of two years as a test. The device was allways online without Code-Lock. Recovery of deleted data, existing data had been analyzed and the generation of a movement profile. All objectives had been implemented without problems. Forensic scientists with lack of experience in this scope are already able to purvey good results. The conclusion took a definite form that the iPhone is not secure due to business exertions. Apple has to improve in this scope, which is not foreseeable at the moment. Same situation shows Android and Windows. For this reasons projects like VOGUE are indispensable.
