DATA EXTRACTION ON MTK-BASED ANDROID MOBILE PHONE FORENSICS

被引：0

作者：

Kong, Joe ^{[1
]}

机构：

[1] Univ Hong Kong, Comp Sci, Hong Kong, Hong Kong, Peoples R China

来源：

JOURNAL OF DIGITAL FORENSICS SECURITY AND LAW | 2015年 / 10卷 / 04期

关键词：

Mobile forensics; MTK Android phones; Android forensics; physical extraction; flash memory; MT6582;

D O I：

暂无

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

In conducting criminal investigations it is quite common that forensic examiners need to recover evidentiary data from smartphones used by offenders. However, examiners encountered difficulties in acquiring complete memory dump from MTK Android phones, a popular brand of smartphones, due to a lack of technical knowledge on the phone architecture and that system manuals are not always available. This research will perform tests to capture data from MTK Android phone by applying selected forensic tools and compare their effectiveness by analyzing the extracted results. It is anticipated that a generic extraction tool, once identified, can be used on different brands of smartphones equipped with the same CPU chipset.

引用

页码：31 / 41

页数：11