Pinpointing TomTom location records: A forensic analysis |
| |
| Institution: | 1. School of Information Technology and Mathematical Sciences, University of South Australia, Adelaide, SA 5095, Australia;2. Department of Information Systems and Cyber Security, The University of Texas at San Antonio, San Antonio, TX 78249-0631, USA;1. VTO Labs;2. University of Salford;1. School of Technology and Management - Polytechnic Institute of Leiria, Leiria, Portugal;2. Instituto de Telecomunicações, Portugal;3. Computer Science and Communication Research Centre, Portugal;1. Bundeskriminalamt, Thaerstrasse 11, 65193 Wiesbaden, Germany;2. Netherlands Forensic Institute, Department of Digital Technology and Biometry, P.O. Box 24044, 2490 AA The Hague, Netherlands |
| |
| Abstract: | TomTom GPS navigation devices are one of the most popular kinds of satellite navigation devices in the UK, and are increasingly being examined in criminal cases to identify data of evidential value. This article outlines the format of TomTom location records and shows how these can be automatically extracted, enabling deleted location entries to be recovered. In addition, it shows how the type of a record – e.g. home or favourite location – can be determined and how to identify locations where the TomTom has actually been, as opposed to destinations which have been entered into the device. This information has been used in a number of different investigations including cases of kidnap, grooming, murder and terrorism, and can be of vital importance in cases where hundreds or even thousands of location entries are recovered from a TomTom device. |
| |
| Keywords: | |
| 本文献已被 ScienceDirect 等数据库收录！ |
|
