Abstract
Pre-installed applications are designed to provide minimal function and installed when the mobile devices is shipped, and they can be used as evidence due to difficulty in deleting them. Location information is forensically meaningful data among data stored by pre-installed application. It can be important clue to secure contextual evidence and to get an alibi since it can infer user’s route and destination in combination with time information. Therefore, in this paper, we analyze location information of pre-installed applications on mobile devices with high market share in Korea so digital investigation can be processed immediately when an incident occurs. In addition, this paper presents a route tracking method using time information and introduces an automated tool that can track the route. As a result of analyzing the 50 pre-installed applications for Samsung mobile devices and 20 pre-installed applications for LG V30, we were able to collect location information from 5 pre-installed applications. Based on this, Our automation tools have shown that it is possible to track the route.
| Translated title of the contribution | A Study on Collection and Utilization Methods of Location Information in Android Pre-installed Applications for Digital Forensics Analysis |
|---|---|
| Original language | Korean |
| Pages (from-to) | 59-74 |
| Number of pages | 16 |
| Journal | 디지털포렌식연구 |
| Volume | 14 |
| Issue number | 1 |
| State | Published - 2020 |