Android Mobile Forensics Methods and Challenges

Abstract

This extraordinary development of mobile communications is a source of new security challenges. Many people use mobile phones in their daily activities, and sometimes, those activities might be criminal in nature.

When a mobile device is encountered during an investigation, many questions arise: What is the best method to retrieve the evidence? What type of data should be retrieved? What software should be used? The key to answering these questions begins with understanding of the hardware and software characteristics of mobile devices. This paper discusses procedures for the preservation, acquisition, examination, and analysis digital evidence in android smartphone, because it’s the most public in smartphone world. I have used MOBILEDIT forensic tool in my example. This paper make it clear that with each new android firmware update, there are initial challenges to the forensic community.