Design And Implementation Of Android Forensics System

Smart phones play an increasingly important role in people’s daily life and work,and have reached the point of “machine does not leave the body”.With the in-depth development and wide application of various information technologies,smart phones have achieved all the functions including payment,social networking,clothing,food,housing and transportation,and identity proof.While smart phones bring convenience to people,there are more and more cases of using mobile phones to engage in illegal activities.Various forms of relevant data have become the focus of forensics personnel.It is of great significance for the national and people’s security to quickly mine the criminal evidence in the mobile phone system.This paper starts from the current situation of forensics work,takes the development of Android forensics system as the research object,starts from the basic situation of forensics personnel’s related work,and analyzes the requirements for the implementation of data recovery,data query and data analysis modules of Android forensics system,so as to accurately grasp the huge amount of jumbled data,all kinds of data information,different storage paths of important databases.This system solves all the problems mentioned above one by one,such as encrypted database,unfriendly presentation of data content and heavy workload of data analysis.According to the actual work content of the forensics personnel,the overall function of the forensics system and its various sub function modules are designed.Finally,different modules of the forensics system are programmed combined with the current forensics work to realize the normal operation of the system.At the same time,the system also uses the social network related algorithms to extract the suspect’s contact information,through the time series diagram,social network topology map and other ways to show the intimacy between the suspect and his contact more intuitively,and uses the word cloud to display browsing history and other information to help forensic personnel quickly analyze the suspect.Through this series of work,the design and implementation of Android forensics system is completed.Tests show that the system can efficiently perform forensic analysis of Android memory data information,and can be applied to mainstream instant messaging,search engine,social software,map navigation,shopping and other applications.It has high practical value,feasibility and universality,and provides great convenience for forensic personnel.