Mobile Cloud Forensics: An Analysis of Seven Popular Android Apps

摘要

Using the evidence collection and analysis methodology for Android devicesproposed by Martini, Do and Choo, we examined and analyzed seven popularAndroid cloud-based apps. Firstly, we analyzed each app in order to see whatinformation could be obtained from their private app storage and SD carddirectories. We collated the information and used it to aid our investigationof each app database files and AccountManager data. To complete ourunderstanding of the forensic artefacts stored by apps we analyzed, weperformed further analysis on the apps to determine if the user authenticationcredentials could be collected for each app based on the information gained inthe initial analysis stages. The contributions of this research include adetailed description of artefacts, which are of general forensic interest, foreach app analyzed.