Forensic Taxonomy of Android Social Apps

• Abdullah Azfar ^[1] ; Kim-Kwang Raymond Choo ^[2] ; Lin Liu ^[1]
  1. [1] University of South Australia

     University of South Australia

     Australia

     
  2. [2] University of Texas at San Antonio

     University of Texas at San Antonio

     Estados Unidos

     
• Localización: Journal of forensic sciences, ISSN-e 1556-4029, ISSN 0022-1198, Vol. 62, Nº. 2, 2017, págs. 435-456
• Idioma: inglés
• Texto completo no disponible (Saber más ...)
• Resumen

  • An Android social app taxonomy incorporating artifacts that are of forensic interest will enable users and forensic investigators to identify the personally identifiable information (PII) stored by the apps. In this study, 30 popular Android social apps were examined. Artifacts of forensic interest (e.g., contacts lists, chronology of messages, and timestamp of an added contact) were recovered. In addition, images were located, and Facebook token strings used to tie account identities and gain access to information entered into Facebook by a user were identified. Based on the findings, a two-dimensional taxonomy of the forensic artifacts of the social apps is proposed. A comparative summary of existing forensic taxonomies of different categories of Android apps, designed to facilitate timely collection and analysis of evidentiary materials from Android devices, is presented.