Title: A framework and a process for digital forensic analysis on smart phones with multiple data logs

Authors: Elhadj Benkhelifa; Benjamin E. Thomas; Lo'ai Tawalbeh; Yaser Jararweh

Addresses: Staffordshire University, Mellor Building, College Road, Stoke on Trent, ST, UK ' Staffordshire University, Mellor Building, College Road, Stoke on Trent, ST, UK ' Computer Engineering Department, Umm Al-Qura University, Makkah, Saudi Arabia; College of Computer and Information Technology, Jordan University of Science and Technology, Irbid, Jordan ' College of Computer and Information Technology, Jordan University of Science and Technology, Irbid, Jordan

Abstract: Nowadays mobile devices are considered an essential component of our daily lives. The rapid evolution in mobile computing has becomes a frustrating factor for law enforcement and the forensic community at large, because of the lack of industry standard, tools and training. Smartphones are becoming the most difficult to extract evidentiary data from. While many commercial forensic tools have made great strides in supporting data extraction, decoding, and analysis, some challenges remain. The smart phones not only keep us connected but also can act as a mobile office, a social tool, and an entertainment centre. The combination of functionality, processing power, and storage space makes smartphones a prime target for investigators. To our knowledge, there is no mobile forensic analysis solution that maps data from different sources including calls, geographical location, multimedia, and web logs. Based on this motivation, in this paper, we aim to propose a framework solution, which could contribute to the development of a novel and potentially a market leading mobile forensic tool.

Keywords: mobile computing; smart phones analysis; framework; digital forensics; metadata; mobile phone forensics.

DOI: 10.1504/IJES.2018.093695

International Journal of Embedded Systems, 2018 Vol.10 No.4, pp.323 - 333

Received: 25 May 2016
Accepted: 18 Jan 2017
Published online: 01 Aug 2018 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article