A study of user data integrity during acquisition of Android devices

Namheun Son, Yunho Lee, Dohyun Kim, Joshua I. James, Sangjin Lee, Kyung Ho Lee

Research output: Contribution to journalArticle

28 Citations (Scopus)

Abstract

At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing 'Recovery Mode'. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool's ability to preserve data integrity.

Original languageEnglish
JournalDigital Investigation
Volume10
Issue numberSUPPL.
DOIs
Publication statusPublished - 2013 Aug 1

Fingerprint

integrity
Equipment and Supplies
Data acquisition
data acquisition
Recovery
Smartphones
compromise
guarantee
ability
time
Digital forensics
Smartphone

Keywords

  • Android
  • Android forensics
  • Data acquisition
  • Data integrity
  • Digital forensic investigation
  • JTAG
  • Mode
  • Recovery

ASJC Scopus subject areas

  • Law
  • Computer Science Applications
  • Medical Laboratory Technology

Cite this

A study of user data integrity during acquisition of Android devices. / Son, Namheun; Lee, Yunho; Kim, Dohyun; James, Joshua I.; Lee, Sangjin; Lee, Kyung Ho.

In: Digital Investigation, Vol. 10, No. SUPPL., 01.08.2013.

Research output: Contribution to journalArticle

Son, Namheun ; Lee, Yunho ; Kim, Dohyun ; James, Joshua I. ; Lee, Sangjin ; Lee, Kyung Ho. / A study of user data integrity during acquisition of Android devices. In: Digital Investigation. 2013 ; Vol. 10, No. SUPPL.
@article{9eb3a8bd96114cbfb1001e63f120dee6,
title = "A study of user data integrity during acquisition of Android devices",
abstract = "At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing 'Recovery Mode'. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool's ability to preserve data integrity.",
keywords = "Android, Android forensics, Data acquisition, Data integrity, Digital forensic investigation, JTAG, Mode, Recovery",
author = "Namheun Son and Yunho Lee and Dohyun Kim and James, {Joshua I.} and Sangjin Lee and Lee, {Kyung Ho}",
year = "2013",
month = "8",
day = "1",
doi = "10.1016/j.diin.2013.06.001",
language = "English",
volume = "10",
journal = "Digital Investigation",
issn = "1742-2876",
publisher = "Elsevier Limited",
number = "SUPPL.",

}

TY - JOUR

T1 - A study of user data integrity during acquisition of Android devices

AU - Son, Namheun

AU - Lee, Yunho

AU - Kim, Dohyun

AU - James, Joshua I.

AU - Lee, Sangjin

AU - Lee, Kyung Ho

PY - 2013/8/1

Y1 - 2013/8/1

N2 - At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing 'Recovery Mode'. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool's ability to preserve data integrity.

AB - At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing 'Recovery Mode'. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool's ability to preserve data integrity.

KW - Android

KW - Android forensics

KW - Data acquisition

KW - Data integrity

KW - Digital forensic investigation

KW - JTAG

KW - Mode

KW - Recovery

UR - http://www.scopus.com/inward/record.url?scp=84881296322&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84881296322&partnerID=8YFLogxK

U2 - 10.1016/j.diin.2013.06.001

DO - 10.1016/j.diin.2013.06.001

M3 - Article

AN - SCOPUS:84881296322

VL - 10

JO - Digital Investigation

JF - Digital Investigation

SN - 1742-2876

IS - SUPPL.

ER -