A study of user data integrity during acquisition of Android devices

Digital Investigation

Volumn 10, Issue SUPPL., 2013, Pages

  Son, Namheun ^a   Lee, Yunho ^a   Kim, Dohyun ^a   James, Joshua I ^b   Lee, Sangjin ^a   Lee, Kyungho ^a  

^a Korea University   (South Korea)

^b UNIVERSITY COLLEGE DUBLIN   (Ireland)

Author keywords

Android; Android forensics; Data acquisition; Data integrity; Digital forensic investigation; JTAG; Mode; Recovery

Indexed keywords

COMPUTER CRIME; DATA ACQUISITION; DIGITAL FORENSICS; ELECTRONIC CRIME COUNTERMEASURES; RECOVERY;

ANDROID; ANDROID FORENSICS; DATA INTEGRITY; FORENSIC INVESTIGATION; JTAG; MODE;

ANDROID (OPERATING SYSTEM);

EID: 84881296322     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2013.06.001     Document Type: Conference Paper

References (25)

1. ADB (Android Debug Bridge), http://developer.android.com/tools/help/adb. html.
2. Android 2.3 Gingerbread uses ext4 file system 2012 http://blog.gsmarena. com/android-2-3-gingerbread-uses-ext4-file-system-promises-better-dual-core- performance/
3. Android 2.3 over reaches 83 percent market share 2012 http://www.zdnet.com/android-4-1-jelly-bean-reaches-1-8-percent-market-share- 7000005096/
4. Android App Store. http://dottech.org/73218/android-now-has-over-600000- apps-installed-20-billion-times/; 2012.
5. Android boot image format, http://www.xinotes.org/notes/note/1048/.
6. Android device market share, http://blog.w3i.com/2012/12/17/android- device-marketshare-percentages/.
7. Android Market Share 2012 http://techcrunch.com/2012/11/02/idc-android- market-share-reached-75-worldwide-in-q3-2012/
8. Android Partitions, http://www.enfeuman.com/2011/06/10/android- partitions-explained/.
9. M.F. Breeuwsma Forensic imaging of embedded systems using JTAG (boundary-scan) Digital Investigation 3 1 2006 32 42
10. B. Carrier File system forensic analysis 2005 Addison-Wesley
11. Cellebrite UFED 2012 http://www.cellebrite.com/mobile-forensic-products/ ufed-touch-ultimate.html
12. S. Chen, and C. Yang Design and implementation of live SD acquisition tool in Android smart phone Fifth international conference on genetic and evolutionary computing 2011 157 162
13. FTL(Flash Translation Layer) Understanding the Flash Translation Layer (FTL) specification 1998 Intel
14. S.-W. Han Flash memory wear leveling system and method Issued 2000 US patent 6,016,275
15. A. Hoong Android forensics: investigation, analysis and mobile security for google Android 2011 Syngress
16. Journal File Systems 2002 http://www.linux-mag.com/id/1180/
17. Z. Jovanovic Android forensics techniques 2012 International Academy of Design and Technology
18. K. Kim, D. Hong, and J. Ryu Forensic data acquisition from cell phones using JTAG interface Information Security Research Division 2008 410 414
19. D. Kim, J. Park, K. Lee, and S. Lee Forensic analysis of Android phone using Ext4 file system journal log. Future information technology Application and Service 164 2012 435 446
20. S. Lee, H. Kim, S. Lee, and J. Lim Digital evidence collection process in integrity and memory information gathering Systematic Approaches to Digital Forensic Engineering 2005 236 247
21. Micro Systemation XRY 2012 http://www.msab.com/
22. MTD (Memory technology devices), http://www.linux-mtd.infradead.org/faq/ nand.html.
23. rootfs, https://www.kernel.org/doc/Documentation/filesystems/ramfs- rootfs-initramfs.txt.
24. T. Vidas, C. Zhang, and N. Christin Toward a general collection methodology for Android devices Digital Investigation 8 2011 S14 S24
25. YAFFS2 (Yet Another Flash File System), http://www.yaffs.net/yaffs-2- specification.