A Model for Mobile Forensic Investigation on Android Devices

Abstract

                 Mobile devices, especially android devices have been used as a tool to commit many computer-related crimes. Since these devices are not too expensive for people to purchase, they can readily be camouflaged, hidden or destroyed. Due to modern technologies that enhance the performance of these devices, there are so many functions to be used, and the storage is extremely. Although we have various effective digital forensic tools to acquire usage data from mobile devices, sometimes we have found that some important usage information such as communication with voice messages or contacts from various applications via the Internet is unable to be acquired by commercial softwares. This problem can affect the verification process. Using a proven authentication technique by retrieving usage data from a database file or a backup file saved in an Android device memory is also an option to enable complete device authentication. Hence, digital forensic examiners need to know where to get access to those effectively android applications.