Abstract
At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing ‘Recovery Mode’. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool’s ability to preserve data integrity.
| Original language | English |
|---|---|
| Pages | S3-S11 |
| DOIs | |
| Publication status | Published - 2013 Jan 1 |
| Event | 2013 Digital Forensic Research Conference, DFRWS 2013 USA - Monterey, United States Duration: 2013 Aug 4 → 2013 Aug 7 |
Conference
| Conference | 2013 Digital Forensic Research Conference, DFRWS 2013 USA |
|---|---|
| Country | United States |
| City | Monterey |
| Period | 13/8/4 → 13/8/7 |
Fingerprint
Keywords
- Android forensics
- Android Recovery Mode
- Data acquisition
- Data integrity
- Digital forensic investigation
- JTAG
ASJC Scopus subject areas
- Information Systems
Cite this
A study of user data integrity during acquisition of android devices. / Son, Namheun; Lee, Yunho; Kim, Dohyun; James, Joshua I.; Lee, Sangjin; Lee, Kyung Ho.
2013. S3-S11 Paper presented at 2013 Digital Forensic Research Conference, DFRWS 2013 USA, Monterey, United States.Research output: Contribution to conference › Paper
}
TY - CONF
T1 - A study of user data integrity during acquisition of android devices
AU - Son, Namheun
AU - Lee, Yunho
AU - Kim, Dohyun
AU - James, Joshua I.
AU - Lee, Sangjin
AU - Lee, Kyung Ho
PY - 2013/1/1
Y1 - 2013/1/1
N2 - At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing ‘Recovery Mode’. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool’s ability to preserve data integrity.
AB - At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing ‘Recovery Mode’. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool’s ability to preserve data integrity.
KW - Android forensics
KW - Android Recovery Mode
KW - Data acquisition
KW - Data integrity
KW - Digital forensic investigation
KW - JTAG
UR - http://www.scopus.com/inward/record.url?scp=85068695239&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85068695239&partnerID=8YFLogxK
U2 - 10.1016/j.diin.2013.06.001
DO - 10.1016/j.diin.2013.06.001
M3 - Paper
SP - S3-S11
ER -