Random Articles
Reseach Article
Skype Forensics in Android Devices
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 78 - Number 7 |
| Year of Publication: 2013 |
| Authors: Mohammed I. Al-saleh, Yahya A. Forihat |
10.5120/13504-1253
|
Mohammed I. Al-saleh, Yahya A. Forihat . Skype Forensics in Android Devices. International Journal of Computer Applications. 78, 7 ( September 2013), 38-44. DOI=10.5120/13504-1253
Abstract
The discipline of smartphone forensics has recently got more at- tention because of the tremendous growth in the smartphones market. Smartphones, to some extent, have similar capabilities to that of PCs. They can store large amount of data and diver- gent categories of information. Among other mobile platforms, Android-based devices are getting more popularity. Variety of mo- bile Applications (Apps) are increasingly developed to mainly extend the functionally of the phones. The usage of Voice over IP (VoIP) Apps has explosively increased for their wide avail- ability and cheap prices. As Skype is one of the most popular VoIP Apps, in this paper we investigate the artifacts of Skype calls and chats in the Android devices. We inspect both the RAM and NAND flash memories in different scenarios and time dura- tions. Even though Skype provides secure communications over the Internet, this paper shows that Skype call and chat evidences can be truly found in the devices. To the best of our knowl- edge, we are the first to investigate Skype in the Android devices.
References
- Mohammed I. Al-Saleh and Ziad A. Al-Sharif. Utilizing data lifetime of tcp buffers in digital forensics: Empirical study. Digital Investigation, 9(2):119 – 124, 2012.
- Pete Broadwell, Matt Harren, and Naveen Sastry. Scrash: a system for generating secure crash information. In Proceed- ings of the 12th conference on USENIX Security Symposium- Volume 12, SSYM'03, pages 19–19, Berkeley, CA, USA, 2003. USENIX Association.
- Jim Chow, Ben Pfaff, Tal Garfinkel, Kevin Christopher, and Mendel Rosenblum. Understanding data lifetime via whole system simulation. In Proc. 13th USENIX Security Sympo- sium, August 2004.
- Jim Chow, Ben Pfaff, Tal Garfinkel, and Mendel Rosenblum. Shredding your garbage: reducing data lifetime through se- cure deallocation. In Proceedings of the 14th conference on USENIX Security Symposium - Volume 14, SSYM'05, pages 22–22, Berkeley, CA, USA, 2005. USENIX Association.
- Dawson Engler, David Yu Chen, Seth Hallem, Andy Chou, and Benjamin Chelf. Bugs as deviant behavior: a general ap- proach to inferring errors in systems code. In Proceedings of the eighteenth ACM symposium on Operating systems prin- ciples, SOSP '01, pages 57–72, New York, NY, USA, 2001. ACM.
- Tal Garfinkel, Ben Pfaff, Jim Chow, and Mendel Rosenblum. Data lifetime is a systems problem. In Proceedings of the 11th workshop on ACM SIGOPS European workshop, EW 11, New York, NY, USA, 2004. ACM.
- Andrew Hoog. Android Forensics: Investigation, Analysis and Mobile Security for Google Android. Syngress Publish- ing, 1st edition, 2011.
- Hajime Inoue, Frank Adelstein, and Robert A Joyce. Visu- alization in testing a volatile memory forensic tool. Digital Investigation, 8(Supplement):S42–S51, 2011.
- M. Jahanirad, A. L. N. Yahya, and R. M. Noor. Security mea- sures for VoIP application: A state of the art review. Scientific Research and Essays, 6(23):4950–4959, 2011.
- Sebastian Schrittwieser, Peter Fru¨ hwirt, Peter Kieseberg, Manuel Leithner, Martin Mulazzani, Markus Huber, and Edgar Weippl. Guess Who's Texting You? Evaluating the Se- curity of Smartphone Messaging Applications. In Proceed- ings of the 19th Annual Network & Distributed System Secu- rity Symposium, February 2012.
- Andreas Schuster. The impact of microsoft windows pool al- location strategies on memory forensics. Digital Investiga- tion, 5, Supplement(0):S58 – S64, 2008. The Proceedings of the Eighth Annual DFRWS Conference.
- Matthew Simon and Jill Slay. Recovery of skype application activity data from physical memory. In ARES, pages 283–288, 2010.
- Jill Slay and Matthew Simon. Voice over ip forensics. In Proceedings of the 1st international conference on Foren- sic applications and techniques in telecommunications, in- formation, and multimedia and workshop, e-Forensics '08, pages 10:1–10:6, ICST, Brussels, Belgium, Belgium, 2008. ICST (Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering).
- Jason Solomon, Ewa Huebner, Derek Bem, and Magdalena Sze?ynska. User data persistence in physical memory. Digital Investigation, 4(2):68 – 72, 2007.
- Joe Sylve, Andrew Case, Lodovico Marziale, and Golden G. Richard III. Acquisition and analysis of volatile memory from android devices. Digital Investigation, 8(3-4):175–184, 2012.
- Vrizlynn L. L. Thing, Kian-Yong Ng, and Ee-Chien Chang. Live memory forensics of mobile phones. Digital Investiga- tion, 7, Supplement(0):S74 – S82, 2010. The Proceedings of the Tenth Annual DFRWS Conference.
- Timothy Vidas, Chengye Zhang, and Nicolas Christin. To- ward a general collection methodology for android devices. Digit. Investig. , 8:S14–S24, August 2011.
- Aaron Walters and Nick L Petroni. Volatools : Integrating volatile memory forensics into the digital investigation pro- cess. Digital Investigation, pages 1–18, 2007.
- Svein Yngvar Willassen. Forensic analysis of mobile phone internal memory. In Mark Pollitt and Sujeet Shenoi, editors, IFIP Int. Conf. Digital Forensics, pages 191–204. Springer, 2005.
- Maynard Yates, II. Practical investigations of digital foren- sics tools for mobile devices. In 2010 Information Security Curriculum Development Conference, InfoSecCD '10, pages 156–162, New York, NY, USA, 2010. ACM.
- Amjad Zareen and Shamim Baig. Mobile phone forensics: Challenges, analysis and tools classification. In Proceedings of the 2010 Fifth IEEE International Workshop on Systematic Approaches to Digital Forensic Engineering, SADFE '10, pages 47–55, Washington, DC, USA, 2010. IEEE Computer Society.
Index Terms
Keywords