Forensic Taxonomy of Android Social Apps |
| |
| Authors: | Abdullah Azfar MSc Kim‐Kwang Raymond Choo PhD Lin Liu PhD |
| |
| Institution: | 1. Information Assurance Research Group, University of South Australia, Adelaide, SA, Australia;2. Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, TX, USA;3. School of Information Technology and Mathematical Sciences, University of South Australia, Adelaide, SA, Australia |
| |
| Abstract: | An Android social app taxonomy incorporating artifacts that are of forensic interest will enable users and forensic investigators to identify the personally identifiable information (PII) stored by the apps. In this study, 30 popular Android social apps were examined. Artifacts of forensic interest (e.g., contacts lists, chronology of messages, and timestamp of an added contact) were recovered. In addition, images were located, and Facebook token strings used to tie account identities and gain access to information entered into Facebook by a user were identified. Based on the findings, a two‐dimensional taxonomy of the forensic artifacts of the social apps is proposed. A comparative summary of existing forensic taxonomies of different categories of Android apps, designed to facilitate timely collection and analysis of evidentiary materials from Android devices, is presented. |
| |
| Keywords: | forensic science digital forensics forensic taxonomy mobile app forensics mobile forensics social app taxonomy |
|
|
