Mobile Malware Forensic Review: Issues and Challenges

Alashjaee, Abdullah Mujawib; Almolhis, Nawaf; Haney, Michael

doi:10.1007/978-3-030-71017-0_26

Cited by 2 publications

(1 citation statement)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Consequently, smartphones became a famous target for cyber-attacks bearing in mind that these devices contain private data [1]. The portability of these devices and the sensitivity of the data they contain raised great concern about the feasibility of using traditional digital forensic methodologies and to what extent they fit this field [2]. Smartphones are equipped with many capabilities that make forensic steps difficult to handle and require great attention.…”

Section: Introduction and Overviewmentioning

confidence: 99%

A Novel Framework for Mobile Forensics Investigation Process

Moreb,

Salah,

Amro

2024

IJCDS

View full text Add to dashboard Cite

Investigating digital evidence by gathering, examining, and maintaining evidence that was stored in smartphones has attracted tremendous attention and become a key part of digital forensics. The mobile forensics process aims to recover digital evidence from a mobile device in a way that will preserve the evidence in a forensically sound condition. This evidence might be used to prove being a cybercriminal or a cybercrime victim. To do this, the mobile forensics process lifecycle must establish clear guidelines for safely capturing, isolating, transporting, storing, and proving digital evidence originating from mobile devices. There are unique aspects of the mobile forensics procedure that must be considered. It is imperative to adhere to proper techniques and norms for the testing of mobile devices to produce reliable results. In this paper, we develop a novel methodology for the mobile forensics process model lifecycle named Mobile Forensics Investigation Process Framework (MFIPF) which encompasses all the necessary stages and data sources used to construct the crime case. The developed framework contributes to identifying common concepts of mobile forensics through the development of the mobile forensics model that simplifies the examination process and enables forensics teams to capture and reuse specialized forensic knowledge. Furthermore, the paper provides a list of the most commonly used forensics tools and where we can use them in our proposed mobile forensic process model.

show abstract

Section: Introduction and Overviewmentioning

confidence: 99%

A Novel Framework for Mobile Forensics Investigation Process

Moreb,

Salah,

Amro

2024

IJCDS

View full text Add to dashboard Cite

show abstract

Digital Forensics Subdomains: The State of the Art and Future Directions

et al. 2021

View full text Add to dashboard Cite

For reliable and relevant scientific evidence to be admitted in a court of law, it is important to apply digital forensic investigation techniques to corroborate a suspected potential security incident. Mainly, traditional digital forensics techniques have focused on computer desktops and servers. However, recent advances in digital media and platforms have seen an increased need for the application of digital forensic investigation techniques to other subdomains including small and mobile devices, databases, networks, cloudbased platforms, and the Internet of Things (IoT). To assist forensic investigators, conduct investigations within these subdomains, academic researchers have attempted to develop a number of investigative processes. However, many of these processes are domain-specific or describe domain-specific investigative tools. Hence, we hypothesize that the literature is littered with potentially overlapping and contradicting investigative process for conducting investigations within these subdomains. To investigate this hypothesis, a digital forensic model-orientated Systematic Literature Review (SLR) within the above digital forensic subdomains was undertaken. The purpose of the SLR was to identify the different and heterogeneous practices that have emerged within the specific subdomains. A key finding from the SLR is that there is a potential information overload and a high-degree of ambiguity among investigative processes in the above subdomains. The outcome of this study proposes a high-level abstract metamodel called The Digital Forensic Metamodel (DFM), which combines common processes, activities, techniques, and tasks for the above subdomains.

show abstract

Mobile Malware Forensic Review: Issues and Challenges

Cited by 2 publications

References 18 publications

A Novel Framework for Mobile Forensics Investigation Process

A Novel Framework for Mobile Forensics Investigation Process

Digital Forensics Subdomains: The State of the Art and Future Directions

Contact Info

Product

Resources

About