Android cache taxonomy and forensic process

Proceedings - 14th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2015

Volumn 1, Issue , 2015, Pages 1094-1101

  Immanuel, Felix ^a   Martini, Ben ^a   Choo, Kim Kwang Raymond ^a  

^a UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

Author keywords

Android cache; Android cache viewer; Android forensics; Cache forensic process; Cache taxonomy

Indexed keywords

DECODING; TAXONOMIES;

ANDROID CACHE; ANDROID CACHE VIEWER; ANDROID FORENSICS; FORENSIC INVESTIGATION; FORENSIC PROCESS; MOBILE FORENSICS; MOBILE OPERATING SYSTEMS; SYSTEMATIC PROCESS;

ANDROID (OPERATING SYSTEM);

EID: 84967138126     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/Trustcom.2015.488     Document Type: Conference Paper

References (30)

1. IDC. "Smartphone OS market share, Q4 2014," 23-April-2015; http://www.idc.com/prodserv/smartphone-os-market-share.jsp.
2. appfigures. "App Stores Growth Accelerates in 2014," 24-April-2015; http://blog.appfigures.com/app-stores-growth-accelerates-in-2014/.
3. V. G. Sundar Pichai, "#AndroidKitKat," 2013.
4. A. Butler, and K.-K. R. Choo, "IT standards and guides do not adequately prepare IT practitioners to appear as expert witnesses: An Australian perspective," Security Journal, 2013.
5. A. Hoog, Android forensics: investigation, analysis and mobile security for Google Android, Massachusetts, Syngress, an imprint of Elsevier, 2011.
6. C. Hooper, B. Martini, and K.-K. R. Choo, "Cloud computing and its implications for cybercrime investigations in Australia," Computer Law &Security Review, vol. 29, no. 2, pp. 152-163, 2013.
7. B. Martini, and K.-K. R. Choo, "Cloud storage forensics: ownCloud as a case study," Digital Investigation, vol. 10, no. 4, pp. 287-299, 2013.
8. H. Xuguang. "An introduction to Android," 23-April-2015; https://androidgroup.googlecode.com/files/Introduction%20to%20 Android.pdf.
9. Google. "LruCache," 26-May-2014; http://developer.android.com/reference/android/util/LruCache.html .
10. H. Q. Raja. "Android partitions explained: Boot, system, recovery, data, cache &misc," 30-May-2014; http://www.addictivetips.com/mobile/android-partitions-explainedboot-system-recovery-data-cache-misc/.
11. K. Barmpatsalou, D. Damopoulos, G. Kambourakis, and V. Katos, "A critical review of 7 years of mobile device forensics," Digital Investigation, vol. 10, no. 4, pp. 323-349, 2013.
12. R. McKemmish, "What is forensic computing?," Trends &Issues in Crime and Criminal Justice, vol. 118, pp. 1-6, 1999.
13. F. Kirkpatrick. "Volley: Easy, fast networking for Android," 25-May-2014; https://developers.google.com/events/io/sessions/325304728.
14. VandalSoftware. "Android Cache Library," 25-May-2014; https://github.com/VandalSoftware/android-cache-lib.
15. M. Käppler. "Ignition," 25-May-2014; https://github.com/mttkay/ignition.
16. pbald. "FileCache," 25-May-2014; https://code.google.com/p/libsfor-android/wiki/FileCache.
17. Square. "Picasso," 25-May-2014; https://github.com/square/picasso.
18. J. Oh, S. Lee, and S. Lee, "Advanced evidence collection and analysis of web browser activity," Digital Investigation, vol. 8, pp. S62-S70, 2011.
19. K. J. Jones. "Forensic analysis of internet explorer activity files," 23-April-2015; http://foundstone.com.au/cf/resources/whitepapers/ foundstone/wp-pasco.pdf.
20. M. T. Pereira, "Forensic analysis of the Firefox 3 Internet history and recovery of deleted SQLite records," Digital Investigation, vol. 5, no. 3, pp. 93-103, 2009.
21. kristinn, "Google Chrome forensics," 21-Jan-2010, digitalforensics. sans.org, 2010.
22. S. Jeon, J. Bang, K. Byun, and S. Lee, "A recovery method of deleted record for SQLite database," Personal and Ubiquitous Computing, vol. 16, no. 6, pp. 707-715, 2012.
23. M. Al-Zarouni, "Mobile handset forensic evidence: a challenge for law enforcement," in Proceedings of 4th Australian Digital Forensics Conference, Perth Western Australia, 2006.
24. B. Martini, Q. Do, and K.-K. R. Choo, "Conceptual evidence collection and analysis methodology for Android devices," The Cloud Security Ecosystem, R. Ko and K.-K. R. Choo, eds.: Syngress, an Imprint of Elsevier, pp. 285-307, 2015.
25. Google. "WebView for Android," 1-Mar-2014, 2014; https://developers.google.com/chrome/mobile/docs/webview/overv iew#what-version-of-chrome-is-it-based-on.
26. D. R. Hipp, and D. Kennedy. "SQLite," 23-April-2015; www.sqlite.org.
27. Android. "BlobCache.java," https://android.googlesource.com/platform/packages/apps/Gallery2 /+/android-4.1.2-r2/gallerycommon/src/com/android/gallery3d/common/Blob Cache.java.
28. Android. "DiskLruCache.java," https://android.googlesource.com/platform/packages/apps/Gallery2 /+/android-4.1.2-r2/libcore/luni/src/main/java/libcore/io/DiskLruCache.java.
29. B. Martini, Q. Do, and K.-K. R. Choo, " Mobile cloud forensics: An analysis of seven popular Android apps," The Cloud Security Ecosystem, R. Ko and K.-K. R. Choo, eds.: Syngress, an Imprint of Elsevier, pp. 309-345, 2015.
30. M. Shariati, A. Dehghantanha, B. Martini, and K.-K. R. Choo, " Ubuntu One investigation: Detecting evidences on client machines," The Cloud Security Ecosystem, R. Ko and K.-K. R. Choo, eds.: Syngress, an Imprint of Elsevier, pp. 429-446, 2015.