dissertation

Recommendations

Info

[53] ACPO e-crime working group. Good practice guide for computer-basedelectronic evidence.[54] MQP Electronics Ltd. USB made simple. http://www.usbmadesimple.co.uk/, retrieved 2012-06-29, 2008.[55] George Grispos, William Bradley Glisson, and Tim Storer. Using smartphonesas a proxy for forensic evidence contained in cloud storage services.Submitted to the 46th Hawaii International Conference on SystemSciences, 2012.[56] Josh Grunzweig. Defeating Flame string obfuscation with IDAPython.http://blog.spiderlabs.com/2012/06/defeating-flame-stringobfuscation-with-idapython.html,retrieved 2012-07-12, June 2012.[57] Jerry Hildenbrand. Android A to A: Nandroid backup. http://www.androidcentral.com/android-z-nandroid-backup, retrieved2012-07-24, June 2012.[58] Jerry Hildenbrand. What is fastboot? http://www.androidcentral.com/android-z-what-fastboot, retrieved 2012-09-01, January 2012.[59] Jerry Hildenbrand. What is recovery? http://www.androidcentral.com/what-recovery-android-z, retrieved 2012-06-29, February 2012.[60] Andrew Hoog. Android Forensics: Investigation, Analysis and MobileSecurity for Google Android. Elsevier, 2011.[61] Susteen Inc. Secure view. http://www.secureview.us/secureview3,retrieved 2012-06-29.[62] International Telecommunications Union. The world in 2011: ICT factsand figures, October 2011.[63] Wayne Janse and Rick Ayers. Guidelines on cell phone forensics. Recommendationof the National Institute of Standards and TechnologyInformation, NIST Special Publication 800-101, 2007.145
[64] Gary Kessler. Anti-forensics and the digital investigator. In Proceedingsof the 5th Australian digital forensics conference, December 2007.[65] Nick Kralevich. It’s not “rooting”, it’s openness. http://androiddevelopers.blogspot.co.uk/2010/12/its-not-rooting-itsopenness.html,retrieved 2012-09-01, December 2010.[66] Richard Lai. Xiaomi Phone review. Engadget, September 2011. http://www.engadget.com/2011/09/27/xiaomi-phone-review/, retrieved2012-06-24.[67] Jeff Lessard and Gary C. Kessler. Android forensics: Simplifying cellphone examinations. Small scale digital device forensics journal, 4(1),September 2010.[68] Hui Liu, Shiva Azadegan, Wei Yu, Subrata Acharya, and Ali Sistani. Arewe relying too much on forensics tools? In Roger Lee, editor, SoftwareEngineering Research,Management and Applications 2011, volume 377of Studies in Computational Intelligence, pages 145–156. Springer Berlin/ Heidelberg, 2012.[69] James Martin. Managing the data-base environment. Prentice Hall,September 1983.[70] Brad Molen. Android 4.0 Ice Cream Sandwich now official, includesrevamped design, enhancements galore. http://www.engadget.com/2011/10/18/android-4-0-ice-cream-sandwich-now-official/, retrieved2012-07-11, October 2011.[71] Phil Nickinson. How to unlock the Nexus S bootloader. http://www.androidcentral.com/how-unlock-nexus-s-bootloader, retrieved2012-06-24, December 2010.[72] Phil Nickinson. What is a bootloader? http://www.androidcentral.com/what-is-android-bootloader, retrieved 2012-06-29, December2010.146
Page 2:
AbstractIn forensic analysis of mob
Page 8 and 9:
Chapter 1IntroductionAccording to t
Page 10 and 11:
forensics tools Cellebrite and XRY
Page 12 and 13:
2.1.1 Data hidingFor PC anti-forens
Page 14 and 15:
Detecting a USB connection suffers
Page 16 and 17:
protected program can access it, as
Page 18 and 19:
modifications at different times, t
Page 20 and 21:
esponsible for handling security an
Page 22 and 23:
contact lists registers that it pro
Page 24 and 25:
Several projects have built upon th
Page 26 and 27:
to return false data to the tools.
Page 28 and 29:
6. Connection to a forensic analysi
Page 30 and 31:
To install it, then, requires the c
Page 32 and 33:
Step 4 According to the documentati
Page 34 and 35:
Chapter 5Implementation, testing an
Page 36 and 37:
The two modules are raw contacts an
Page 38 and 39:
200-500 small writes in the time fr
Page 40 and 41:
make the data impossible to spot in
Page 42 and 43:
had time to isolate the phone befor
Page 44 and 45:
abort the extraction and show the e
Page 46 and 47:
(a) Extraction summary(b) Extractio
Page 48 and 49:
Figure 5.11: Cellebrite extraction
Page 50 and 51:
Figure 5.14: Contacts fed to Celleb
Page 52 and 53:
(a) Cellebrite extraction report(b)
Page 54 and 55:
(a) SIM contacts visible(b) SIM con
Page 56 and 57:
Chapter 6ConclusionsThis dissertati
Page 58 and 59:
Android is an open system, with spe
Page 60 and 61:
• Hide SIM contacts from the fore
Page 62 and 63:
that it is possible to use Java ref
Page 64 and 65:
7.3 EncryptionStarting with version
Page 66 and 67:
operating system components, but th
Page 68 and 69:
Appendix BTool behaviourThe followi
Page 70 and 71:
S e l e c t i o n : i d = 1 ANDmime
Page 72 and 73:
Appendix CSource codeC.1 USBMonitor
Page 74 and 75:
∗/private S t r i n g e o l ;priv
Page 76 and 77:
}}Bundle e x t r a s = i n t e n t
Page 78 and 79:
index 3 bee54d . . 0 0 be75e 100644
Page 80 and 81:
73import android . p r o v i d e r
Page 82 and 83:
+ }+ r e t u r n n u l l ;+ }+@Over
Page 84 and 85:
@@ −4349 ,6 +4384 ,7 @@ p u b l i
Page 86 and 87:
c a s e POSTALS: {+ Log . i (TAG,
Page 88 and 89:
qb . setProjectionMap ( sGroupsSumm
Page 90 and 91:
c a s e RAW CONTACT ENTITIES: {+ Lo
Page 92 and 93:
index f 2 b 6 f c e . . 1 eb2972 10
Page 94 and 95:
87++ // A t t r i b u t e s c o n s
Page 96 and 97:
89+ i n t s t r O f f = s t O f f +
Page 98 and 99:
C.4 Delayed responsesThis is the co
Page 100 and 101:
+ p r i v a t e boolean c a l l e r
Page 102 and 103: 95index 00 be75e . . cb000e9 100644
Page 104 and 105: p r i v a t e boolean i n i t i a l
Page 106 and 107: 99+ // no d e l e t e d c o n t a c
Page 108 and 109: 101+ Log . i (TAG, ” Unknown quer
Page 110 and 111: 103+ // I n t e n t i o n a l l y r
Page 112 and 113: 105+ ” n u l l as ” + Structure
Page 114 and 115: 107+ ” ” + PhoneticNameStyle .U
Page 116 and 117: C.6 False data from alternate datab
Page 118 and 119: − p r i v a t e s t a t i c f i n
Page 120 and 121: +import com . android . p r o v i d
Page 122 and 123: Log . i (TAG, ” S e l e c t i o n
Page 124 and 125: C.7 Delayed restorationThis is the
Page 126 and 127: 119+ Log . i (TAG, ” Faking ” +
Page 128 and 129: 121− // b e f o r e and a f t e r
Page 130 and 131: C.8 Hiding SIM contactsThis is the
Page 132 and 133: ++ // This i s the CyanogenMod 7 .
Page 134 and 135: ArrayList r e s u l t s ;− i f (
Page 136 and 137: index c218592 . . a4dbaae 100644−
Page 138 and 139: 131+ /∗+ ∗ ( non−Javadoc )+
Page 140 and 141: package com . android . p r o v i d
Page 142 and 143: 135++ /∗+ ∗ ( non−Javadoc )+
Page 144 and 145: 137+ Log . i (TAG, ” Running quer
Page 146 and 147: Appendix EDeclaration of originalit
Page 148 and 149: [8] Android development guides—Th
Page 150 and 151: [34] Tarpit (networking). http://en
Page 154 and 155: [73] Android Open Source Project. L
Page 156: [94] Randal Vaughn and Gadi Evron.
show all

dissertation

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?