Abstract : Smartphones have become an integral part of people’s lives. Their wide range of capabilities and support of diverse applications result in a wealth of data being stored in smartphone memory. Although tools are available to extract and view the data stored in smartphones, no comprehensive process exists for event reconstruction using the extracted data. Data in smartphones is typically stored in SQLite databases and can, therefore, be easily transformed. To perform event reconstruction, multiple SQLite databases have to be integrated. This paper proposes a novel mobile event reconstruction process that allows for event reconstruction by querying the integrated SQLite databases collected from multiple smartphones. The process can create detailed accounts of the events that took place before, during and after an incident.
Gilbert Peterson; Sujeet Shenoi. 10th IFIP International Conference on Digital Forensics (DF), Jan 2014, Vienna, Austria. Springer, IFIP Advances in Information and Communication Technology, AICT-433, pp.237-251, 2014, Advances in Digital Forensics X. 〈10.1007/978-3-662-44952-3_16〉
https://hal.inria.fr/hal-01393774
Contributeur : Hal Ifip
<>
Soumis le : mardi 8 novembre 2016 - 10:49:47
Dernière modification le : vendredi 1 décembre 2017 - 01:17:02
Document(s) archivé(s) le : mardi 14 mars 2017 - 23:14:01
Heloise Pieterse, Martin Olivier. Smartphones as Distributed Witnesses for Digital Forensics. Gilbert Peterson; Sujeet Shenoi. 10th IFIP International Conference on Digital Forensics (DF), Jan 2014, Vienna, Austria. Springer, IFIP Advances in Information and Communication Technology, AICT-433, pp.237-251, 2014, Advances in Digital Forensics X. 〈10.1007/978-3-662-44952-3_16〉. 〈hal-01393774〉
