Research On Android Mobile Phone Data Forensics Application

High-tech crime has become less familiar than traditional crime in recent years.Along with the rapid development of the economic level and the all-round coverage of the "big data" era,the living standards of Chinese residents have generally improved and mobile communication technologies have continuously made breakthroughs.In order to meet the consumer demand of mobile phone users,smartphones,which are one of the representatives of mobile terminal devices,are mass-produced.Among them,Android-based smart phones occupy more than half of the communications equipment market.As one of the "microcomputers",smart phones are attracting the attention of criminals while relying on the enhanced functions to facilitate each user.Because of its small size,portability,and access to the Internet,the criminal cases of various large and small cases made by the perpetrators using mobile phones are growing.Undoubtedly,the use of smart phone crime is another high-tech crime following computer crime.Therefore,it is necessary to carry out technical extraction and practical application research on valuable electronic data in mobile phones,in order to provide some basis and reference for investigators and forensic professionals working in the front line.This paper mainly focuses on the Android smartphones that are most favored by consumers on the market,and carries out specific analysis and related application research in the related major data forensics.The full text consists of five parts: The first part is the introduction of this paper.The research background,purpose and significance of mobile data forensics are proposed.The existing researches on Android mobile phone data forensics are summarized and summarized,and the research of this thesis is determined.Content and general article structure.The second part starts with the Android operating system,mainly analyzes the overall architecture,data storage mechanism and security mechanism of the system,and then elaborates on the relevant content of mobile forensics,including the definition and principle of mobile forensics,the content and method of forensics and the steps of forensic framework.Aspects.The third part analyzes and studies the main contents of Android mobile phone data forensics according to different types,including basic data forensics,memory card data forensics,application software data forensics,other data forensics and recovery data for recovery and evidence collection.Based on the theoretical basis of the previous three chapters,the fourth part introduces some practical applications of Android mobile phone data forensics.The mobile phone WeChat in the application software data is analyzed and researched.Firstly,some commonly used mobile phone forensics tools are briefly explained.Secondly,the third-party WeChat avatar data extraction and the recovery of the deleted WeChat data are analyzed.Finally,the WeChat chat record in an Android mobile phone is used under certain conditions to obtain the degree of association between friends by using some forensic tools.Valuable data content.The fifth partsummarizes the full text,points out the shortcomings,and looks forward to the future trend of electronic data forensics and the content to be perfected in this paper.