NDLI: Practicability study of android volatile memory forensic research

Content Provider	IEEE Xplore Digital Library
Author	Wachter, P. Gruhn, M.
Copyright Year	2015
Description	Author affiliation: Fac. Comput. Sci., Albstadt-Sigmaringen Univ., Albstadt, Germany (Wachter, P.) \|\| Dept. Comput. Sci., Friedrich-Alexander Univ. Erlangen-Nurnberg, Erlangen, Germany (Gruhn, M.)
Abstract	As Android device and application storage encryption becomes more widespread, memory analysis becomes more important. Memory is often the only data immediately accessible without decryption and in most cases stores the encryption keys of persistent data currently in use. This work therefore investigates the practicability of current research in forensics with regard to acquiring and analyzing volatile memory of Android smartphones. To this end, we investigate 8 different Android smartphones in their stock vendor configurations. While we are able to recreate current research results by specifically preparing specific phones the same way as described in the relevant research publications, we are only able to conduct a full acquisition and full analysis against 1 of our 8 sample smartphones in its stock configuration. Because the stock configuration, as shipped by the manufacturer, i.e. non-rooted and locked boot loader, is the most likely configuration encountered by forensic investigators, we unfortunately must conclude that current research methods are not applicable in practice. We further present reasons for our conclusion and possible resolutions which should be endeavored by future research.
Starting Page	1
Ending Page	6
File Size	649564
Page Count	6
File Format	PDF
e-ISBN	9781467368025
DOI	10.1109/WIFS.2015.7368601
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-11-16
Publisher Place	Italy
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Forensics Linux Humanoid robots Androids Data mining Kernel Smart phones
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Dump and analysis of Android volatile memory on Wechat

Android mobile forensic analyzer for stegno data

Android platform based linux kernel rootkit

Android low entropy demystified

Android porting concepts

Performance analysis for improved RAM utilization for Android applications

Two vulnerabilities in Android OS kernel

A Privacy Enhanced Security Framework for Android Users

Forensic analysis of Wickr application on android devices

Practicability study of android volatile memory forensic research

Similar Documents

Dump and analysis of Android volatile memory on Wechat

Android mobile forensic analyzer for stegno data

Android platform based linux kernel rootkit

Android low entropy demystified

Android porting concepts

Performance analysis for improved RAM utilization for Android applications

Two vulnerabilities in Android OS kernel

A Privacy Enhanced Security Framework for Android Users

Forensic analysis of Wickr application on android devices

Practicability study of android volatile memory forensic research