Android Forensics: Investigation, Analysis and Mobile Security for Google Android

Android Forensics: Investigation, Analysis and Mobile Security for Google Android

Volumn , Issue , 2011, Pages 1-372

  Hoog, Andrew ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85016564973     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1016/C2010-0-65787-7     Document Type: Book

References (97)

1. Alliance, F. A. Q. (n.d.). Open Handset Alliance. Retrieved January 3, 2011, from . http://www.openhandsetalliance.com/oha_faq.html.
2. Alliance Members. (n.d.). Open Handset Alliance. Retrieved March 9, 2011, from . http://www.openhandsetalliance.com/oha_members.html.
3. Android developers blog: Android Market: a user-driven content distribution system. (n.d.). Retrieved January 9, 2011, from . http://android-developers.blogspot.com/2008/08/android-market-user-driven-content.html.
4. Android developers blog: Exercising our remote application removal feature. (n.d.). Retrieved January 9, 2011, from . http://android-developers.blogspot.com/2010/06/exercising-our-remote-application.html.
5. Android Market developer distribution agreement. (n.d.). Retrieved January 9, 2011, from . http://www.android.com/us/developer-distribution-agreement.html.
6. Android Market terms of service. (n.d.). Retrieved January 9, 2011, from . http://www.google.com/mobile/android/market-tos.html.
7. Android Market statistics from AndroLib, Androlib, Android applications and games directory. (n.d.). Retrieved January 9, 2011, from . http://www.androlib.com/appstats.aspx.
8. Android 2.3 platform, & Android developers. (n.d.). Retrieved January 8, 2011, from . http://developer.android.com/sdk/android-2.3.html%23locs.
9. Bort, D. (n.d.). Android is now available as open source. Android Open Source Project. Retrieved January 3, 2011, from . https://sites.google.com/a/android.com/opensource/posts/opensource.
10. China's OPhone to find its way to US as Android+. (n.d.). Retrieved January 8, 2011, from . http://www.borqs.com/news.jsp.
11. Corporate information: About. (n.d.). Google. Retrieved January 4, 2011, from . http://www.google.com/corporate/.
12. comScore reports November 2010 U.S. mobile subscriber market share. (n.d.). comScore.Inc. Retrieved January 9, 2011, from http://www.comscore.com/Press_Events/Press_Releases/2011/1/comScore_Reports_November_.
13. CyanogenMod, About the Rom, CyanogenMod. (n.d.). Retrieved January 8, 2011, from . http://www.cyanogenmod.com/about.
14. Gartner says worldwide mobile phone sales grew 35 percent in third quarter 2010; smartphone sales increased 96 percent. (n.d.) Technology Research & Business Leader Insight. Gartner Inc. Retrieved March 9, 2011, from http://www.gartner.com/it/page.jsp? id=1466313.
15. Get Android source code, Android open source. (n.d.). Retrieved March 9, 2011, from . http://source.android.com/source/download.html.
16. Google Investor: Google android activating 350,000 devices daily (data visualization video) "Top global smartphone platform." (n.d.). Retrieved March 9, 2011, from . http://googinvestor.blogspot.com/2011/03/google-android-activations-350k-daily.html.
17. Krazit, T. (n.d.). Google's Rubin: Android "a revolution." Digital MediadCNET News. Technology News-CNET News. Retrieved January 5, 2011, from . http://news.cnet.com/8301-1023_3-10245994-93.html.
18. Licenses. (n.d.). Android open source. Retrieved January 5, 2011, from . http://source.android.com/source/licenses.html.
19. Languages and scripts. (n.d.). Unicode Consortium. http://unicode.org/repos/cldr-tmp/trunk/diff/supplemental/languages_and_scripts.html.
20. Lawson, S. (n.d.). Android Market needs more filters, T-Mobile says. ITworld, IT news, technology analysis and how-to resources. Retrieved January 9, 2011, from . http://www.itworld.com/personal-tech/64481/android-market-needs-more-filters-t-mobile-says.
21. Mills, E. (n.d.). Google remotely wipes apps off Android phones. InSecurity Complex-CNET News. Technology News-CNET News. Retrieved January 9, 2011, from . http://news.cnet.com/8301-27080_3-20008922-245.html.
22. Official Google Blog: Where's my Gphone? (n.d.). Retrieved January 2, 2011, from . http://googleblog.blogspot.com/2007/11/wheres-my-gphone.html.
23. Supported locations for merchants-Android Market help. (n.d.). Retrieved January 9, 2011, from =en&answer=150324. http://www.google.com/support/androidmarket/bin/answer.py%3Fhl.
24. Torvalds, L. (1991, October 5). Free minix-like kernel sources for 386-AT-comp.os.minix. Google Groups. Retrieved March 3, 2011, from . http://groups.google.com/group/comp.os.minix/msg/2194d253268b0a1b.
25. xda-developers. (n.d.). Retrieved January 8, 2011, from www.xda-developers.com/.
26. Android-x86-Porting Android to x86. (n.d.). Retrieved March 9, 2011, from . http://www.android-x86.org/.
27. Bjornheden, M. (n.d.). Enea Android Blog: The Android boot process from power on. Retrieved December 17, 2010, from . http://www.androidenea.com/2009/06/android-bootprocess-from-power-on.html.
28. Chromium OS-The Chromium projects. (n.d.). Retrieved December 13, 2010, from . http://www.chromium.org/chromium-os.
29. Day 74 Sales: Apple iPhone vs. Google Nexus One vs. Motorola Droid. (n.d.). The Flurry Blog-Mobile application analyticsjiPhone analyticsjAndroid analytics. Retrieved December 18, 2010, from . http://blog.flurry.com/bid/31410/Day-74-Sales-Apple-iPhone-vs-Google-Nexus-One-vs-Motorola-Droid.
30. Krazit, T. (n.d.). T-Mobile has sold 1 million G1 Android phones. WirelessdCNET News. Technology newsdCNET News. Retrieved December 18, 2010, from . http://news.cnet.com/8301-1035_3-10226034-94.html.
31. Linux on the iPhone. (n.d.). Retrieved December 15, 2010, from . http://linuxoniphone.blogspot.com/.
32. Main PagejPDAdb.net-Comprehensive database of smartphone, PDA, PDA phone, PNA, netbook & mobile device specifications. (n.d.). Retrieved November 28, 2010, from . http://pdadb.net/index.php.
33. Mobile Memory. (n.d.). Hynix. Retrieved March 9, 2011, from =1&m=4&s=4. http://www.hynix.com/products/mobile/mcp.jsp%3FmenuNo.
34. Nielsen Wire. (n.d.). U.S. smartphone battle heats up: Which is the "most desired" operating system? Retrieved December 12, 2010, from blog.nielsen.com/nielsenwire/online_mobile/us-smartphone-battle-heats-up/.
35. Public Version of OMAP35xx. (2010). Technical reference manual-Version M (SPRUF98M) Houston, TX: Texas Instruments Incorporated. Retrieved December 17, 2010, from . http://focus.ti.com/docs/prod/folders/print/omap3530.html.
36. Using hardware devices. (n.d.). Android developers. Retrieved March 9, 2011, from . http://developer.android.com/guide/developing/device.html.
37. Android timeline. (n.d.). Android tutorials, news, views and forums, Android Academy. Retrieved March 12, 2011, from . http://www.androidacademy.com/1-android-timeline.
38. Platform Versions, (n.d.). Android developers. Retrieved March 12, 2011, from . http://developer.android.com/resources/dashboard/platform-versions.html.
39. comScore Reports November 2010 U.S. Mobile Subscriber Market Share-comScore, Inc. (n.d.). comScore, Inc.-Measuring the digital world. Retrieved March 12, 2011, from . http://www.comscore.com/Press_Events/Press_Releases/2011/1/comScore_Reports_November_2010_.
40. Android 1.5 Platform. (n.d.). Android developers. Retrieved March 12, 2011, from . http://developer.android.com/sdk/android-1.5.html.
41. Android 1.6 Platform. (n.d.). Android developers. Retrieved March 12, 2011, from . http://developer.android.com/sdk/android-1.6.html.
42. Android 2.1 Platform. (n.d.). Android developers. Retrieved March 12, 2011, from . http://developer.android.com/sdk/android-2.1.html.
43. SDK Archives. (n.d.). Android developers. Retrieved March 13, 2011, from . http://developer.android.com/sdk/older_releases.html.
44. smali-Project Hosting on Google Code. (n.d.). Google code. Retrieved March 13, 2011, from . http://code.google.com/p/smali/.
45. Android On Lockdown: AT&T Removes Best Parts of Android from Backflip (n.d.). AndroidGuys. The trusted source for Android news and opinion, Est. 2007. Retrieved March 13, 2011, from . http://www.androidguys.com/2010/03/08/android-lockdown-att-removes-parts-android-backflip/.
46. Android developers blog: Saving data safely. (n.d.). Retrieved February 2, 2011, from . http://android-developers.blogspot.com/2010/12/saving-data-safely.html.
47. Android reverse engineering. (n.d.). Retrieved January 29, 2011, from . http://thomascannon.net/projects/android-reversing/.
48. Data storage. (n.d.). Android Developers. Retrieved March 13, 2011, from . http://developer.android.com/guide/topics/data/data-storage.html%23netw.
49. How YAFFS works: the internals. (n.d.). YAFFS. Retrieved February 4, 2011, from . http://www.yaffs.net/how-yaffs-works-internals.
50. Nand Faq. (n.d.). Memory technology device (MTD) subsystem for Linux, Retrieved March 13, 2011, from . http://www.linux-mtd.infradead.org/faq/nand.html.
51. The sysfs filesystem. (n.d.), Retrieved February 1, 2011, from . http://www.kernel.org/pub/linux/kernel/people/mochel/doc/papers/ols-2005/mochel.pdf.
52. Way, T. (n.d.). Android will be using ext4 starting with Gingerbread. Thoughts by Ted. Welcome to, Retrieved February 2, 2011, from . http://thunk.org/tytso/blog/2010/12/12/android-will-be-using-ext4-starting-with-gingerbread/.
53. Licence FAQs, Y. A. F. F. S. (n.d.). YAFFS, Retrieved February 4, 2011, from . http://www.yaffs.net/yaffs-licence-faqs.
54. YAFFS: the NAND-specific flash file system-Introductory Article. (n.d.). Retrieved February 2, 2011, from . http://www.yaffs.net/yaffs-nand-specific-flash-file-system-introductoryarticle.
55. Country. (n.d.). Computer crime law-guide to computer crimes law. Retrieved February 10, 2011, from . http://www.hg.org/computer-crime.html.
56. Cisco unified video conferencing multiple vulnerabilities. (n.d.). Matta Consulting. Retrieved February 11, 2011, from . http://www.trustmatta.com/advisories/MATTA-2010-001.txt.
57. Cisco Security advisory: multiple vulnerabilities in Cisco unified video conferencing products-Cisco Systems. (n.d.). Retrieved February 10, 2011, from . http://www.cisco.com/en/US/products/products_security_advisory09186a0080.
58. default. (n.d.). OAuth for installed applications-authentication and authorization for Google APIs-Google Code. Retrieved February 12, 2011, from . http://code.google.com/apis/accounts/docs/OAuthForInstalledApps.htm.
59. Device administration. (n.d.). Android Developers. Retrieved February 11, 2011, from . http://developer.android.com/guide/topics/admin/device-admin.html.
60. Donohue, B. (n.d.). Mobile device users more susceptible to phishing scams. Retrieved February 10, 2011, from . http://threatpost.com/en_us/blogs/mobile-device-users-more-susceptible-phishing-scams-010511.
61. Documents Library. (n.d.). PCI security standards documents: PCI DSS, PA-DSS, PED standards, compliance guidelines and more. Retrieved February 12, 2011, from . https://www.pcisecuritystandards.org/security_standards/documents.php?agreements=pcidss&assocation=PCI%20DSS.
62. [Full-disclosure] Microsoft Windows NT #GP trap handler allows users to switch kernel stack. (n.d.). Retrieved February 10, 2011, from . http://lists.grok.org.uk/pipermail/full-disclosure/2010-January/072549.html.
63. Introduction-OAuthn. (n.d.). OAuth Community Site. Retrieved February 12, 2011, from . http://oauth.net/about/.
64. Johnston, S. J. (n.d.). Microsoft warns about 17-year-old windows bug. Retrieved February 10, 2011, from . http://www.esecurityplanet.com/features/article.php/3860131/article.htm.
65. Microsoft security advisory (979682) vulnerability in Windows kernel could allow elevation of privilege. (n.d.). Retrieved February 10, 2011, from . http://www.microsoft.com/technet/security/advisory/979682.mspx.
66. Ralf-Philipp Weinmann. (n.d.). CryptoLUX. Retrieved February 10, 2011, from . https://cryptolux.org/Ralf-Philipp_Weinmann.
67. Schneier on security: data at rest vs. data in motion. (n.d.). Retrieved February 9, 2011, from . http://www.schneier.com/blog/archives/2010/06/data_at_rest_vs.html.
68. Secure programming for Linux and Unix HOWTO. (n.d.). David A. Wheeler's personal home page. Retrieved February 10, 2011, from . http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/open-source-security.html.
69. Ten, T. T. (n.d.). Field of dreams (1989)-Memorable quotes. The Internet movie database (IMDb). Retrieved February 10, 2011, from . http://www.imdb.com/title/tt0097351/quotes?qt0314964.
70. US-CERT Vulnerability Note VU#836068. (n.d.). CERT Knowledgebase. Retrieved February 13, 2011, from . http://www.kb.cert.org/vuls/id/836068.
71. US-CERT Vulnerability Note VU#120541. (n.d.). CERT Knowledgebase. Retrieved February 13, 2011, from . http://www.kb.cert.org/vuls/id/120541.
72. WordNet search-3.0. (n.d.). Retrieved February 10, 2011, from . http://wordnetweb.princeton.edu/perl/webwn?s=art.
73. Zoller T. TLS & SSLv3 renegotiation vulnerability explained. SANS Internet Storm Center; Cooperative Network Security Community-Internet Security 2009, November 29, Retrieved February 13, 2011, from. http://isc.sans.edu/diary.html?storyid=7582.
74. ACPO Good Practice Guide for Computer-Based Electronic Evidence-7Safe Information Security. (n.d.). Retrieved February 19, 2011, from . http://7safe.com/electronic_evidence/index.html%23.
75. Android & Windows Phone: Tablets, Apps, & ROMs @ xda-developers. (n.d.). Retrieved February 23, 2011, from . http://www.xda-developers.com/.
76. Aviv, Gibson, Mossop, Blaze, & Smith. (n.d.). Smudge attacks on smartphone touch screens. Retrieved February 21, 2011, from . http://www.usenix.org/events/woot10/tech/full_papers/Aviv.pdf.
77. Cannon, T. (n.d.). Android lock screen bypass. Retrieved February 21, 2011, from . http://thomascannon.net/blog/2011/02/android-lock-screen-bypass/.
78. dc3dd. (n.d.). Retrieved February 22, 2011, from . http://dc3dd.sourceforge.net/.
79. Government Employment & Payroll. (n.d.). Retrieved February 19, 2011, from . http://www.census.gov/govs/apes/.
80. [Guide] Flashing Linux Motorola's with RSD Lite Versions. (n.d.). Retrieved February 24, 2011, from . http://modmymobile.com/forums/8-guides-downloads-forum-suggestions/218651-guide-flashing-linux-motorolas-rsd-lite-versions.html.
81. HTC-Developer Center. (n.d.). Retrieved February 28, 2011, from . http://developer.htc.com/adp.html.
82. IEEE SA-1149.1-1990-IEEE Standard Test Access Port and Boundary-Scan Architecture. (n.d.). Retrieved February 23, 2011, from . http://standards.ieee.org/findstds/standard/1149.1-1990.html.
83. RerWare, LLC: Android Backup and BlackBerry Backup-MyBackup Pro. (n.d.). Retrieved February 22, 2011, from . http://www.rerware.com/.
84. File times (Windows). (n.d.). Retrieved February 13, 2011, from . http://msdn.microsoft.com/en-us/library/ms724290%28VS.85%29.aspx.
85. Carrier, B. (n.d.). Mactime output-SleuthKitWiki. Retrieved February 13, 2011, from . http://wiki.sleuthkit.org/index.php%3Ftitle%3DMactime_output.
86. Casey, E. (n.d.). Misinterpretation of file system timestamps. Retrieved February 13, 2011, from . http://blog.cmdlabs.com/2009/05/08/misinterpretation-of-file-system-timestamps/.
87. Debugging in Android with tombstones. (n.d.). Retrieved March 14, 2011, from . http://crazydaks.com/debugging-in-android-with-tombstones.html.
88. Digital assembly: Adroit photo forensics-SmartCarving™. (n.d.). Retrieved February 13, 2011, from . http://digital-assembly.com/products/adroit-photo-forensics/features/smartcarving.html.
89. Digital Detective-DCode. (n.d.). Retrieved February 14, 2011, from . http://www.digital-detective.co.uk/freetools/decode.asp.
90. Epoch converter-epoch & unix timestamp conversion tools. (n.d.). Retrieved February 14, 2011, from . http://www.epochconverter.com/.
91. Grundy, B. (n.d.). Linux LEO. Retrieved February 19, 2011, from . http://www.linuxleo.com.
92. Kessler, G. (n.d.). File signatures table. Retrieved February 13, 2011, from . http://www.garykessler.net/library/file_sigs.html.
93. Ross, A. (n.d.). digfor: Time and timestamps. Retrieved February 13, 2011, from . http://digfor.blogspot.com/2008/10/time-and-timestamps.html.
94. Rovio-Angry Birds. (n.d.). Retrieved February 15, 2011, from . http://www.rovio.com/index.php%3Fpage%3Dangry-birds.
95. Scalpel: a frugal, high performance file carver. (n.d.). Retrieved February 13, 2011, from . http://www.digitalforensicssolutions.com/Scalpel/.
96. What is my IP address. (n.d.). Retrieved February 19, 2011, from . http://www.whatismyip.com/.
97. YAFFS debugging. (n.d.). Retrieved February 17, 2011, from . http://www.yaffs.net/yaffs-debugging.