Evaluating the privacy of Android mobile applications under forensic analysis

Computers and Security

Volumn 42, Issue , 2014, Pages 66-76

  Ntantogian, Christoforos ^a   Apostolopoulos, Dimitris ^a   Marinakis, Giannis ^a   Xenakis, Christos ^a  

^a UNIVERSITY OF PIRAEUS   (Greece)

Author keywords

Android; Authentication credentials; Memory dump; Mobile applications; Mobile forensics; Privacy of mobile applications; Volatile memory

Indexed keywords

EID: 84894111873     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2014.01.004     Document Type: Article

References (26)

1. D. Abbott Linux for embedded and real-time applications 3rd ed. December 2012 [chapter 7]
2. D. Apostolopoulos, G. Marinakis, C. Ntantogian, and C. Xenakis Discovering authentication credentials in volatile memory of Android mobile devices the 12th IFIP conference on e-business, e-services, e-society (I3E 2013), Athens, Greece April 2013
3. D. Bornstein Dalvik VM internals Google I/O developer conference June 2008
4. A. Case Memory analysis of the Dalvik (Android) virtual machine Dec. 2011 SOURCE Seattle
5. Consumer Survey Password habits September 2012
6. E. Girault Volatilitux: physical memory analysis of Linux systems Dec. 2010
7. A. Hoog Android forensics: investigation, analysis, and mobile security for Google Android June 2011 Syngress, Elsevier
8. http://blog.flurry.com/bid/88867/iOS-and-Android-Adoption-Explodes- Internationally [accessed on May 2013].
9. http://code.google.com/p/lime-forensics [retrieved on Nov. 2012].
10. http://developer.Android.com/tools/debugging/ddms.html [accessed on Nov. 2012].
11. http://developer.android.com/tools/help/adb.html [accessed on Nov. 2012].
12. http://developer.android.com/about/dashboards/index.html [accessed on 01.05.13].
13. http://mobworld.wordpress.com/2010/07/05/memory-management-in-Android/ [accessed on Nov. 2012].
14. http://thomascannon.net/projects/android-reversing [accessed on Oct. 2013].
15. http://www.forensicswiki.org/wiki/dd [accessed on Oct. 2013].
16. http://www.sleuthkit.org/sleuthkit/index.php [accessed on Oct. 2013].
17. IDC worldwide quarterly mobile phone tracker May 2013
18. S. Karayianni, V. Katos, and C.K. Georgiadis A framework for password harvesting from volatile memory Int J Electron Secur Digit Forensics 4 2-3 2012 154 163
19. Kramer S. http://c-skills.blogspot.com/2010/08/droid2.html [accessed on Oct. 2013].
20. T. Müller, and M. Spreitzenbarth Frost forensic recovery of scrambled telephones 11th International conference on applied cryptography and network security (ACNS 2013), Alberta, Canada June 2013
21. A. Mylonas, A. Kastania, and D. Gritzalis Delegate the smartphone user? Security awareness in the smartphone platforms Comput Secur 34 1 May 2013 47 66 Elsevier Science
22. A. Mylonas, M. Theoharidou, and D. Gritzalis Assessing privacy risks in Android: a user-centric approach Proceedings of the 1st international workshop on risk assessment and risk-driven testing (RISK-2013) November 2013 Springer Turkey
23. Ponemon Institute LLC The lost smartphone problem: benchmark study of U.S. organizations Ponemon Institute research report, sponsored by McAfee Oct. 2011
24. J. Sylve, A. Case, L. Marziale, and G.G. Richard Acquisition and analysis of volatile memory from android device Digit Investig 8 3-4 Feb 2012 175 184 Elsevier
25. V. Thing, K.-Y. Ng, and E.-C. Chang Live memory forensics of mobile phones 10th Annual conference of digital forensic research workshop (DFRW) 2010
26. S. Wright The Symantec smartphone honey stick project Mar. 2012 Symantec Corporation