The Partial Digital Evidence Disclosure in Respect to the Instant Messaging Embedded in Viber Application Regarding an Android Smart Phone

Chu, Hai-Cheng; Yang, Szu-Wei; Wang, Shiuh-Jeng; Park, Jong Hyuk

doi:10.1007/978-94-007-5083-8_22

Cited by 10 publications

(9 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the study of Skype and MSN apps, Chu, Lo were able to locate the target strings in the Android device's memory, even after the devices were rebooted. In the investigation of the Android Viber app, Chu, Yang were able to create an image of the memory and recover the received and sent IMs using the sender's and receiver's mobile numbers.…”

Section: Related Workmentioning

confidence: 99%

An Android Communication App Forensic Taxonomy

Azfar

Choo

Liu

2016

Journal of Forensic Sciences

View full text Add to dashboard Cite

Due to the popularity of Android devices and applications (apps), Android forensics is one of the most studied topics within mobile forensics. Communication apps, such as instant messaging and Voice over IP (VoIP), are one popular app category used by mobile device users, including criminals. Therefore, a taxonomy outlining artifacts of forensic interest involving the use of Android communication apps will facilitate the timely collection and analysis of evidentiary materials from such apps. In this paper, 30 popular Android communication apps were examined, where a logical extraction of the Android phone images was collected using XRY, a widely used mobile forensic tool. Various information of forensic interest, such as contact lists and chronology of messages, was recovered. Based on the findings, a two-dimensional taxonomy of the forensic artifacts of the communication apps is proposed, with the app categories in one dimension and the classes of artifacts in the other dimension. Finally, the artifacts identified in the study of the 30 communication apps are summarized using the taxonomy. It is expected that the proposed taxonomy and the forensic findings in this paper will assist forensic investigations involving Android communication apps.

show abstract

Section: Related Workmentioning

confidence: 99%

An Android Communication App Forensic Taxonomy

Azfar

Choo

Liu

2016

Journal of Forensic Sciences

View full text Add to dashboard Cite

show abstract

“…In our recent survey of 117 academic publications on mobile app security, privacy and forensics between January 2009 and August 2014, we only located 11 publications on mobile app forensics; of which four related to communication apps (Chu et al 2013;Chu et al 2012;Gao and Zhang 2013;Husain and Sridhar 2010); two related to social networking apps (Al Mutawa et al 2012;Levinson et al 2011); and five related to cloud apps (Martini and Choo 2013;Martini and Choo 2014;Quick and Choo 2013a;Quick and Choo 2013b;Quick and Choo 2014). To the best of our knowledge, there has been no research on mHealth app forensics published between January 2009 and August 2014, and at the time of this research.…”

Section: Related Workmentioning

confidence: 99%

Forensic Taxonomy of Android Social Apps

Azfar

Choo

Liu

2016

Journal of Forensic Sciences

View full text Add to dashboard Cite

An Android social app taxonomy incorporating artifacts that are of forensic interest will enable users and forensic investigators to identify the personally identifiable information (PII) stored by the apps. In this study, 30 popular Android social apps were examined. Artifacts of forensic interest (e.g., contacts lists, chronology of messages, and timestamp of an added contact) were recovered. In addition, images were located, and Facebook token strings used to tie account identities and gain access to information entered into Facebook by a user were identified. Based on the findings, a two-dimensional taxonomy of the forensic artifacts of the social apps is proposed. A comparative summary of existing forensic taxonomies of different categories of Android apps, designed to facilitate timely collection and analysis of evidentiary materials from Android devices, is presented.

show abstract

“…Recent research investigates the risk that mobile phones present to individual members of society [16] and to the business world [14]. It has also examined some of the challenges these devices present to forensic investigations [9,17,18,25]. Hence, it is only a matter of time before individuals, organizations and businesses implement solutions to mitigate these risks through anti-forensics activities.…”

Section: Relevant Workmentioning

confidence: 99%

Android Anti-forensics: Modifying CyanogenMod

Karlsson¹,

Glisson²

2014

2014 47th Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

Mobile devices implementing Android operating systems inherently create opportunities to present environments that are conducive to anti-forensic activities. Previous mobile forensics research focused on applications and data hiding anti-forensics solutions. In this work, a set of modifications were developed and implemented on a CyanogenMod community distribution of the Android operating system. The execution of these solutions successfully prevented data extractions, blocked the installation of forensic tools, created extraction delays and presented false data to industry accepted forensic analysis tools without impacting normal use of the device. The research contribution is an initial empirical analysis of the viability of operating system modifications in an anti-forensics context along with providing the foundation for future research.Comment: Karlsson, K.-J. and W.B. Glisson, Android Anti-forensics: Modifying CyanogenMod in Hawaii International Conference on System Sciences (HICSS-47). 2014, IEEE Computer Society Press: Hawai

show abstract

The Partial Digital Evidence Disclosure in Respect to the Instant Messaging Embedded in Viber Application Regarding an Android Smart Phone

Cited by 10 publications

References 7 publications

An Android Communication App Forensic Taxonomy

An Android Communication App Forensic Taxonomy

Forensic Taxonomy of Android Social Apps

Android Anti-forensics: Modifying CyanogenMod

Contact Info

Product

Resources

About