FORENSIC RESEARCH ON DATA RECOVERY OF ANDROID SMARTPHONE
暂无分享,去创建一个
With the popularity of the Android smart phone, life of people has become more and more convenient, it also bring new ways for criminals to commit a crime. Data recovery is an important part of forensic, because it can mine potential evidences. In this paper ,we find chance to recover the data which is deleted but not erased after analyzing the structure of NAND and YAFFS2 file system, especially the mechanism of deleting data, this paper put forward a method to recover data of Android smart phone with Yaffs2 file system. KeywordsAndroid; forensic; YAFFS2;data recovery;NAND
[1] S. Maus,et al. Forensic Analysis of Geodata in Android Smartphones , 2011 .
[2] Dai Ji-ming. Study on Mobile Phone Forensic and Digital Evidence Acquisition , 2007 .
[3] Darren Quick,et al. Forensic analysis of the android file system YAFFS2 , 2011 .
[4] Gary C. Kessler,et al. Android forensics: Simplifying cell phone examinations , 2010 .