Passe-partout: A general collection methodology for android devices

IEEE Transactions on Information Forensics and Security

Volumn 8, Issue 12, 2013, Pages 1937-1946

  Votipka, Daniel ^a   Christin, Nicolas ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

forensics; mobile communication; Mobile computing

Indexed keywords

ANALYSIS TECHNIQUES; DATA CORRUPTION; DIGITAL FORENSIC; FORENSICS; GENERAL METHODOLOGIES; MOBILE COMMUNICATIONS; SOFTWARE PLATFORMS;

ELECTRONIC CRIME COUNTERMEASURES; MOBILE COMPUTING; MOBILE DEVICES;

ROBOTS;

EID: 84888117876     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2013.2285360     Document Type: Article

References (35)

1. (2012, Sep.). Five Iphone 5 Features Tim Cook Will Not Announce Today [Online]. Available: http://www.forbes.com/sites/adriankingsleyhughes/2012/09/ 12/five-iphone-5-features-tim-cook-will-not-announce-today/
2. (2012, Oct.). Here is Another Reason Google Continues to Shun Sd Cards-Multiuser Support [Online]. Available: http://www.androidpolice.com/2012/ 10/30/here-is-another-reason-google-continuesto-shun-sd-cards-multiuser-support/
3. (2012, Apr.). Amon Ra Recovery Tool-Android Wiki [Online]. Available: http://android-dls.com/wiki/index.php?title= Amon-Ra-recovery-tool
4. (2012, Mar.). Android & Windows Phone: Tablets, Apps, & Roms @ Xda-Developers [Online]. Available: http://www.xda-developers.com/
5. (2012, Apr.). Android Developers [Online]. Available: http://developer.android.com/
6. (2012, Mar.). Android mods | Android Forum, Android Hacks, Android Tips, Android Applications, Android Downloads [Online]. Available: http://androidmodz.com/
7. (2012, Mar.). Building for Devices | Android Open Source [Online]. Available: http://source.android.com/source/building-devices.html
8. (2012, Mar.). Busybox [Online]. Available: http://busybox.net/about.html
9. (2012, Mar.). Busybox-busybox: The Swiss Army Knife of Embedded Linux [Online]. Available: http://git.busybox.net/busybox/tree/docs/newapplet-HOWTO. txt
10. Cyanogenmod [Online]. Available: http://www.cyanogenmod.org/
11. (2012, Mar.). Droid Mod [Online]. Available: http://www.droidforums.net/ forum/droid-mod/
12. (2012, Feb.). Heimdall-Glass Echidna [Online]. Available: http://www. glassechidna.com.au/products/heimdall/
13. (2012, Mar.). Howto: Unpack, Edit, and Re-Pack Boot Images [Online]. Available: http://android-dls.com/wiki/index.php?title= HOWTO:-Unpack%2C- Edit%2C-and-Re-Pack-Boot-Images
14. (2012, Mar.). Htcdev-Htc Kernel Source Code and Binaries [Online]. Available: http://htcdev.com/devcenter/downloads
15. Initramfs-Gentoo Linux Wiki [Online]. Available: https://wiki.gentoo.org/ wiki/Initramfs/HOWTO
16. (2012, Mar.). Opticaldelusion: Sbf-Flash [Online]. Available: http://blog.opticaldelusion.org/2010/05/sbfflash.html
17. (2012, Mar.). Rom Manager [Online]. Available: https://market. android.com/details?id=com.koushikdutta.rommanager=en
18. (2012, Mar.).Samsungopen Source Release Center [Online]. Available: https://opensource.samsung.com/index.jsp
19. [Online]. Available: https://sourcery.mentor.com/sgpp/lite/arm/portal/ release324
20. M. Al-Zarouni, "Introduction to mobile phone flasher devices and considerations for their use in mobile phone forensics," in Proc. 5th Austral. Dig. Forensics Conf., Dec. 2007, pp. 1-6.
21. M. Breeuwsma, M. D. Jongh, C. Klaver, R. V. D. Knijff, and M. Roeloffs, "Forensic data recovery from flash memory," Small, vol. 1, no. 1, pp. 1-17, 2007.
22. W. Enck, D. Octeau, P. McDaniel, and S. Chaudhuri, "A study of android application security," in Proc. USENIX Sec. Symp., Aug. 2011, pp. 1-16.
23. S. Garfinkel, "Digital forensics research: The next 10 years," Dig. Invest., vol. 7, pp. S64-S73, Aug. 2010.
24. A. Hoog, "Android forensics," in Mobile Forensics World, 1st ed. Amsterdam, The Netherlands: Elsevier, May 2009.
25. A. Hoog. (2010, Mar.). Open Source Android Digital Forensics Application [Online]. Available: http://computer-forensics.sans.org/blog/2010/03/01/open- source-android-digital-forensics-application/
26. J. Lessard and G. Kessler, "Android forensics: Simplifying cell phone examinations," Small Scale Dig. Device Forensics J., vol. 4, no. 1, pp. 1-12, Sep. 2010.
27. G. Me and M. Rossi, "Internal forensic acquisition for mobile equipments," in Proc. IEEE IPDPS, Apr. 2008, pp. 1-7.
28. S. Namheun, Y. Lee, D. Kim, J. James, S. Lee, and K. Lee, "A study of user data integrity during acquisition of android devices," in Proc. DFRWS, Aug. 2013, pp. S3-S11.
29. J. Rutkowska. (2009, Jan.). The Invisible Things Lab's Blog: Why Do I Miss Microsoft Bitlocker [Online]. Available: http://theinvisiblethings. blogspot.com/2009/01/why-do-i-miss-microsoft-bitlocker.html
30. J. Sylve, A. Case, L. Marziale, and G. G. Richard, "Acquisition and analysis of volatile memory from android devices," Dig. Invest., vol. 8, nos. 3-4, pp. 175-184, Feb. 2012.
31. T. Vidas, D. Votipka, and N. Christin, "All your droid are belong to us: A survey of current android attacks," in Proc. WOOT, Aug. 2011, pp. 1-10.
32. T. Vidas, C. Zhang, and N. Christin, "Toward a general collection methodology for Android devices," Dig. Invest., vol. 8, pp. S14-S24, Aug. 2011.
33. R. Walls, E. Learned-Miller, and B. Levine, "Forensic triage for mobile phones with DEC0DE," in Proc. USENIX Sec. Symp., Aug. 2011, pp. 1-14.
34. S. Y. Willassen, "Forensic analysis of mobile phone internal memory," in Advances in Digital Forensics. New York, NY, USA: Springer-Verlag, Feb. 2005, pp. 191-204.
35. J. Zdziarski, iPhone Forensics-Recovering Evidence, Personal Data and Corporate Assets. Sebastopol, CA, USA: O'Reilly, 2008.