A study of user data integrity during acquisition of android devices

Namheun Son, Yunho Lee, Dohyun Kim, Joshua I. James, Sangjin Lee, Kyung Ho Lee

Research output: Contribution to conferencePaper

3 Citations (Scopus)

Abstract

At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing ‘Recovery Mode’. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool’s ability to preserve data integrity.

Original languageEnglish
PagesS3-S11
DOIs
Publication statusPublished - 2013 Jan 1
Event2013 Digital Forensic Research Conference, DFRWS 2013 USA - Monterey, United States
Duration: 2013 Aug 42013 Aug 7

Conference

Conference2013 Digital Forensic Research Conference, DFRWS 2013 USA
CountryUnited States
CityMonterey
Period13/8/413/8/7

Fingerprint

Data acquisition
Recovery
Smartphones
Digital forensics

Keywords

  • Android forensics
  • Android Recovery Mode
  • Data acquisition
  • Data integrity
  • Digital forensic investigation
  • JTAG

ASJC Scopus subject areas

  • Information Systems

Cite this

Son, N., Lee, Y., Kim, D., James, J. I., Lee, S., & Lee, K. H. (2013). A study of user data integrity during acquisition of android devices. S3-S11. Paper presented at 2013 Digital Forensic Research Conference, DFRWS 2013 USA, Monterey, United States. https://doi.org/10.1016/j.diin.2013.06.001

A study of user data integrity during acquisition of android devices. / Son, Namheun; Lee, Yunho; Kim, Dohyun; James, Joshua I.; Lee, Sangjin; Lee, Kyung Ho.

2013. S3-S11 Paper presented at 2013 Digital Forensic Research Conference, DFRWS 2013 USA, Monterey, United States.

Research output: Contribution to conferencePaper

Son, N, Lee, Y, Kim, D, James, JI, Lee, S & Lee, KH 2013, 'A study of user data integrity during acquisition of android devices' Paper presented at 2013 Digital Forensic Research Conference, DFRWS 2013 USA, Monterey, United States, 13/8/4 - 13/8/7, pp. S3-S11. https://doi.org/10.1016/j.diin.2013.06.001
Son N, Lee Y, Kim D, James JI, Lee S, Lee KH. A study of user data integrity during acquisition of android devices. 2013. Paper presented at 2013 Digital Forensic Research Conference, DFRWS 2013 USA, Monterey, United States. https://doi.org/10.1016/j.diin.2013.06.001
Son, Namheun ; Lee, Yunho ; Kim, Dohyun ; James, Joshua I. ; Lee, Sangjin ; Lee, Kyung Ho. / A study of user data integrity during acquisition of android devices. Paper presented at 2013 Digital Forensic Research Conference, DFRWS 2013 USA, Monterey, United States.
@conference{14e0af801e164a9faeaa7f157865acd4,
title = "A study of user data integrity during acquisition of android devices",
abstract = "At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing ‘Recovery Mode’. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool’s ability to preserve data integrity.",
keywords = "Android forensics, Android Recovery Mode, Data acquisition, Data integrity, Digital forensic investigation, JTAG",
author = "Namheun Son and Yunho Lee and Dohyun Kim and James, {Joshua I.} and Sangjin Lee and Lee, {Kyung Ho}",
year = "2013",
month = "1",
day = "1",
doi = "10.1016/j.diin.2013.06.001",
language = "English",
pages = "S3--S11",
note = "2013 Digital Forensic Research Conference, DFRWS 2013 USA ; Conference date: 04-08-2013 Through 07-08-2013",

}

TY - CONF

T1 - A study of user data integrity during acquisition of android devices

AU - Son, Namheun

AU - Lee, Yunho

AU - Kim, Dohyun

AU - James, Joshua I.

AU - Lee, Sangjin

AU - Lee, Kyung Ho

PY - 2013/1/1

Y1 - 2013/1/1

N2 - At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing ‘Recovery Mode’. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool’s ability to preserve data integrity.

AB - At the time of this writing, Android devices are widely used, and many studies considering methods of forensic acquisition of data from Android devices have been conducted. Similarly, a diverse collection of smartphone forensic tools has also been introduced. However, studies conducted thus far do not normally guarantee data integrity required for digital forensic investigations. Therefore, this work uses a previously proposed method of Android device acquisition utilizing ‘Recovery Mode’. This work evaluates Android Recovery Mode variables that potentially compromise data integrity at the time of data acquisition. Based on the conducted analysis, an Android data acquisition tool that ensures the integrity of acquired data is developed, which is demonstrated in a case study to test tool’s ability to preserve data integrity.

KW - Android forensics

KW - Android Recovery Mode

KW - Data acquisition

KW - Data integrity

KW - Digital forensic investigation

KW - JTAG

UR - http://www.scopus.com/inward/record.url?scp=85068695239&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85068695239&partnerID=8YFLogxK

U2 - 10.1016/j.diin.2013.06.001

DO - 10.1016/j.diin.2013.06.001

M3 - Paper

AN - SCOPUS:85068695239

SP - S3-S11

ER -