A comparison of forensic evidence recovery techniques for a windows mobile smart phone

Digital Investigation

Volumn 8, Issue 1, 2011, Pages 23-36

  Grispos, George ^a   Storer, Tim ^a   Glisson, William Bradley ^a  

^a UNIVERSITY OF GLASGOW   (United Kingdom)

Author keywords

Digital forensics; File carver; Logical acuquisition; Physical acquisition; Smart phone; Windows mobile

Indexed keywords

DECODING; DIGITAL FORENSICS; MERGERS AND ACQUISITIONS; MOBILE DEVICES; RECOVERY; TELEPHONE SETS;

FILE CARVER; FORENSIC EVIDENCE; LOGICAL ACUQUISITION; OPEN SOURCE COMMUNITIES; PHYSICAL ACQUISITION; RECOVERY TECHNIQUES; TOOLS AND METHODS; WINDOWS MOBILES;

SMARTPHONES;

EID: 80051672577     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2011.05.016     Document Type: Article

References (32)

1. ACPO Good practice guide for computer-based electronic evidence 2007 Association of Chief Police Officers, 7Safe
2. T. Allen GSM mobile device and associated media tool test assertions and test plan 1st ed. 2008 National Institute for Science and Technology
3. M. Breeuwsma, M. de Jongh, Coert Klaver, Ronald van der Knijff, and M. Roeloffs Forensic data recovery from flash memory Small Scale Digital Device Forensics Journal 1 1 2007 Available from http://www.ssddfj.org/papers/ssddfj- v1-1-breeuwsma-et-al.pdf
4. E. Casey, M. Bann, and J. Doyle Introduction to windows mobile forensics Digital Investigation 6 - 2010 136 146
5. Cellebrite UFED logical support list Cellebrite; v1138 ed.; 2010 Available from http://www.mydocbox.com/cellebrite2/newsletter/05-13-2010/ Standard/UFED-Logical-v1138-Phone-support-list.xls
6. Cellebrite UFED physical Pro supported phones list Cellebrite; v1138 ed.; 2010 2010 Available from http://www.mydocbox.com/cellebrite2/newsletter/05-13- 2010/Pro/UFED-Physical-Pro-v1138-Phones-supported.xls
7. F. Dellutri, V. Ottaviani, and G. Me MIAT-WM5: forensic acquisition for windows mobile pocketpc W.W. Smari, Proceedings of the workshop on security and high performance computing systems, part of the 2008 international conference on high performance computing and simulation: HPCS 2008 Cyprus Nicosia
8. K.E. Emam, and A.G. Koru A replicated survey of it software project failures IEEE Software 25 5 2008 84 90
9. A. Fresco Abandoned mobile phones may have led police to arrests on m6 2010 The Times London, UK Available From http://www.timesonline.co.uk/tol/news/ uk/crime/article2017532.ece (Last Accessed: 23.6.2010)
10. Gartner Gartner says worldwide mobile device sales grew 13.8 percent in second quarter of 2010, but competition drove prices down 2010 Online Press Release; 2010. Available from http://www.gartner.com/it/page.jsp?id=1421013
11. Hengeveld JW. Xda project - rapi tools. Online. Available From: http://www.xs4all.nl/itsme/projects/xda/tools.html. (Last Accessed: 17.6.2010).
12. A. Hunt, and D. Thomas Software archaeology IEEE Software 19 2 2002 22 24
13. H. Jahankhani Criminal investigation and forensic tools for smartphones International Journal of Electronic Security and Digital Forensics 2 4 2009 387 406
14. W. Jansen, and R. Ayers Guidelines on cell phone forensics Special Publication 800-101 2007 National Institute of Standards and Technology Gaithersburg, MD 20899-8930
15. W. Jansen, A. Delaitre, and L. Moenner Overcoming impediments to cell phone forensics Proceedings of the 41st Hawaii international conference on system sciences 2008 IEEE Computer Society Waikoloa, Big Island, HI, USA 483
16. G. Kessler File signatures table 2010 Available from http://www. garykessler.net/library/file-sigs.html
17. C. Klaver Windows mobile advanced forensics Digital Investigation 6 3-4 2010 147 167
18. J. Kornblum Identifying almost identical files using context triggered piecewise hashing Digital Investigation 3 Suppl. 1 2006 91 97 (Pubitemid 44088492)
19. R. Kuhn Non-GSM mobile device tool test assertions and test plan 1st ed. 2009 National Institute for Science and Technology
20. R. Kuhn Smart phone tool test assertions and test plan 1st ed. 2010 National Institute for Science and Technology
21. R. Lock, T. Storer, N. Harvey, C. Hughes, and I. Sommerville Observations of the Scottish elections 2007 Transforming Government: People, Process and Policy 2 2 2008 104 118
22. P. Mokhonoana, and M. Olivier Acquisition of a Symbian smart phone's content with an on-phone forensic tool Southern African telecommunication networks and applications conference 2007. Sugar Beach Resort, Mauritius 2007
23. Moore T. The economics of digital forensics. To appear, Workshop on the Economics of Information Security 2006.
24. National Institute for Justice Test results for mobile device acquisition tool: Micro systemation.XRY 3.6 2008 National Institute for Justice U.S. Department of Justice, 810 Seventh Street N.W. Washington, DC 20531, USA
25. National Institute for Justice Test results for mobile device acquisition tool: Cellebrite UFED 1.1.05 2009 National Institute for Justice U.S. Department of Justice, 810 Seventh Street N.W. Washington, DC 20531, USA
26. F. Rehault Windows mobile advanced forensics: an alternative to existing tools Digital Investigation 7 1-2 2010 38 47
27. B. Robinson Limited horizons, limited influence: information technology the London ambulance service Proceedings of the international symposium on technology and society technical expertise and public decisions 1996 IEEE Computer Society Press 506 514
28. G.G.R.V. Roussev Scalpel: a frugal, high performance file carver Digital forensic research workshop. New Orleans, Louisiana, USA 2005
29. C. Summers Mobile phones - the new fingerprints BBC News Online 2003 Available from http://news.bbc.co.uk/1/hi/uk/3303637.stm
30. T. Whitehead Terror concerns over mobile phones in prison 2009 The Telegraph London, UK Available From http://www.telegraph.co.uk/news/uknews/law- and-order/6906211/Terror-concerns-over-mobile-phones-in-prison.html (Last Accessed: 12.6.2010)
31. S. Willassen Forensic analysis of mobile phone internal memory M. Pollitt, S. Shenoi, Advances in digital forensics. IFIP international conference on digital forensics 2005 Springer Orlando, Florida, USA 191 204
32. B. Williamson, P. Apeldoorn, B. Cheam, and M. Macdonald Forensic analysis of the contents of nokia mobile phones Australian digital forensics conference 2006 Paper 36