A study of user data integrity during acquisition of Android devices

Son, Namheun; Lee, Yunho; Kim, Dohyun; James, Joshua I.; Lee, Sang-Jin; Lee, Kyung-Ho

doi:10.1016/j.diin.2013.06.001

Cited by 38 publications

(32 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…This is also a contentious issue because it all comes down to the process and the tools used. Another related work is that done by (Son et al, 2013); "A study of user data integrity during acquisition of Android devices". The study proposes to use the JTAG (Joint Test Action Group).…”

Section: Introductionmentioning

confidence: 99%

An investigation into the impact of rooting android device on user data integrity

Hassan

Lutta

2017

2017 Seventh International Conference on Emerging Security Technologies (EST)

View full text Add to dashboard Cite

Abstract-The available commercial and freeware mobile forensics tools heavily rely on a rooted mobile device for them to extract data. The potential effects of rooting the device before extraction could pose a threat to the forensic integrity rendering the acquisition process flawed.An endeavour was made in compiling of this paper investigating the impact of rooting android mobile devices on user data integrity. The research examines and analyses data from an android Samsung phone. A framework has been developed to illustrate measures and steps to be observed in the extraction of data from mobile devices.

show abstract

Section: Introductionmentioning

confidence: 99%

An investigation into the impact of rooting android device on user data integrity

Hassan

Lutta

2017

2017 Seventh International Conference on Emerging Security Technologies (EST)

View full text Add to dashboard Cite

show abstract

“…An acquisition method based on changing the custom recovery image has been studied in the scholarly works (Vidas et al, 2011;Son et al, 2013). Use of the custom recovery image guarantees the integrity of the user data.…”

Section: Related Workmentioning

confidence: 99%

“…Second, the dump method based on changing the custom recovery image (Son et al, 2013) is the only approach that takes into account the integrity of the user data. However, this method cannot guarantee the integrity of the entire flash memory dump because it also flashes the custom recovery image.…”

Section: Introductionmentioning

confidence: 99%

New acquisition method based on firmware update protocols for Android smartphones

Yang

Choi

Kim

et al. 2015

Digital Investigation

View full text Add to dashboard Cite

a b s t r a c tAndroid remains the dominant OS in the smartphone market even though the iOS share of the market increased during the iPhone 6 release period. As various types of Android smartphones are being launched in the market, forensic studies are being conducted to test data acquisition and analysis. However, since the application of new Android security technologies, it has become more difficult to acquire data using existing forensic methods. In order to address this problem, we propose a new acquisition method based on analyzing the firmware update protocols of Android smartphones. A physical acquisition of Android smartphones can be achieved using the flash memory read command by reverse engineering the firmware update protocol in the bootloader. Our experimental results demonstrate that the proposed method is superior to existing forensic methods in terms of the integrity guarantee, acquisition speed, and physical dump with screen-locked smartphones (USB debugging disabled).

show abstract

“…The research paper by Vidas et al (2011) was the motive for Son et al (2013) to conduct an evaluation on the Recovery Mode method the former proposed, in terms of data integrity preservation. Seven rooted Samsung devices running the Android OS took part as a sample.…”

Section: Android Forensicsmentioning

confidence: 99%