Forensic analysis of android mobile devices

Rao, V.V. Bapeswara; Chakravarthy, A. S. N.

doi:10.1109/icraie.2016.7939540

Cited by 9 publications

(4 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The backup contains all the information related to these apps even after uninstallation. In [51], Facebook , WhatsApp, Hike, Viber, and Imo were analyzed on an Android phone. Loca-tions of artifacts were discussed in this research.…”

Section: Related Work: Application Forensicsmentioning

confidence: 99%

Forensic Analysis of Social Networking Applications on an Android Smartphone

Menahil

Iqbal

Iftikhar

et al. 2021

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

Smartphone users spend a substantial amount of time in browsing, emailing, and messaging through different social networking apps. The use of social networking apps on smartphones has become a dominating part of daily lives. This momentous usage has also resulted in a huge spike in cybercrimes such as social harassing, abusive messages, vicious threats, broadcasting of suicidal actions, and live coverage of violent attacks. Many of such crimes are carried out through social networking apps; therefore, the forensic analysis of allegedly involved digital devices in crime scenes and social apps installed on them can be helpful in resolving criminal investigations. This research is aimed at performing forensic investigation of five social networking apps, i.e., Instagram, LINE, Whisper, WeChat, and Wickr on Android smart phones. The essential motivation behind the examination and tests is to find whether the data resides within the internal storage of the device or not after using these social networking apps. Data extraction and analysis are carried out using three tools, i.e., Magnet AXIOM, XRY, and Autopsy. From the results of these experiments, a considerable amount of essential data was successfully extracted from the examined smartphone. This useful data can easily be recovered by forensic analysts for future examination of any crime situation. Finally, we analyzed the tools on the basis of their ability to extract digital evidences from the device and their performance are examined with respect to NIST standards.

show abstract

Section: Related Work: Application Forensicsmentioning

confidence: 99%

Forensic Analysis of Social Networking Applications on an Android Smartphone

Menahil

Iqbal

Iftikhar

et al. 2021

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

show abstract

“…The Android OS was developed by the Open Handset Alliance (OHA), leveraging on the Linux kernel for its core and mounting blocks of this operating system. According to Rao & Chakravarthy (2016), the android OS is characterized by having a Dalvik virtual Machine (VM). This virtual machines allows the mobile phone that is running the android OS to be able to run several applications and processes, however, as this run is processed by a unique id, the applications and processes do not interact with each other, only if special permissions and configurations are assigned to these applications.…”

Section: The Mobile Phone's Archaeology and Mobile Forensics Available Applicationsmentioning

confidence: 99%

“…Likewise, Rao & Chakravarthy (2016) denote that as for acquisition and examination of mobile data specially, message applications like WhatsApp, the digital investigator may leverage on the usage of UFED (Universal Forensic Extraction Device) and the analysis of the evidences that comes from these using the UFED Physical Analyzer. Likewise, the Cellebrite's UEFD Touch application is able to perform the acquisition of data from a mobile phone in the very different levels of extractions, including the physical one, that refers to the creation of an exact copy of the memory of the mobile phone, supporting also the file system extraction (Bjornson & Hunter, 2016).…”

Section: The Mobile Phone's Archaeology and Mobile Forensics Available Applicationsmentioning

confidence: 99%

“…To use this application at its fullest, the user should root the mobile phone in order to gain access to root user privileges, and then run the Linux command in order to retrieve the image of the mobile phone. The final step is to use the FTK imager for the forensics analysis of this image and for the retrieval of relevant information (Rao & Chakravarthy, 2016).…”

Section: The Mobile Phone's Archaeology and Mobile Forensics Available Applicationsmentioning

confidence: 99%

See 1 more Smart Citation

Mobile Device Forensics Investigation Process

Bernardo

Santos

2020

Handbook of Research on Cyber Crime and Information Privacy

View full text Add to dashboard Cite

One of the main topics that is discussed today is how can a person leverage technology in a positive and secure way in order to enhance their lives. However, with improvements in technology comes challenges; the concern that people have over their privacy and the safeguard of sensitive information being the greatest. In fact, one of the most used technologies is the mobile, which can take different forms, features, and shapes and create, store, delete, and transfer various types of data that can be evidence for the forensics fields. As such, this chapter proposes a different approach to this field by conglomerating and researching for all the information available and aiming at building a comprehensive systematic literature review on the topics of forensics, digital and mobile device forensics using the PRISMA methodology, with the intent of supporting and enhancing the mobile device forensics investigation process and allowing for a more robust and up-to-date knowledge base by breaking through the techniques available.

show abstract