Key Technologies for Mobile Phone Forensics and Application

Abstract

Mobile phone is an important source of evidence for judicial staff, but the research of mobile phone forensics system is quite deficient compared with computer forensics. Toward this end, this paper proposed an integrated framework of the mobile phone forensics system, which is based on the characteristic and difficulties of mobile phone forensics. To begin with, the inner structure and forensic process of the system are introduced, which are crucial fundamental techniques for follow-up work. To be specific, it applied three-step strategy, namely, moreover, this paper studies the method of data collection and analyzes the functions of the mobile phone forensics system. At the same time, in order to deal with the database scenario, it proposed a decryption method and a data-recovery method based on SQLite, which is the key part of this paper. Finally, the practicability of this system is shown by graphic demonstration.