Abstract—In recent years advanced capabilities of smartphones have enabled their users to store and manage copious information about their personal and professional life. Consequently, any seized smartphone might involve some useful evidence. However a wide variety of manufacturers, different operating systems, enormous hardware components and a huge number of programs that smartphones are using make it difficult to reach a unified forensic framework for all models. This paper firstly reviews the previous works on remote and local data acquisition methods from smartphones. Afterwards, it reports difficulties in analyzing and examining retrieved data from smartphones. Additionally, it evaluates current forensic investigation process models in relation to smartphones in order to find a suitable model that can be applied to all smartphones forensic investigations. This paper proposes solutions for addressing data acquisition, data examination, and investigation process model to ultimately come towards a unified framework for investigation of smartphones.
—Mobile forensics, smartphone investigation, forensic framework.
The authors are with Asia Pacific University College of Technology and Innovation, Kuala Lumpur, Malaysia (e-mail: email@example.com, firstname.lastname@example.org).
Cite: S. H. Mohtasebi and A. Dehghantanha, "Towards a Unified Forensic Investigation Framework of Smartphones," International Journal of Computer Theory and Engineering
vol. 5, no. 2, pp. 351-355, 2013.