Design And Implementation Of Digital Forensics System And Its Framework For Android-based Mobile Terminals

As the mainstream of intelligent mobile devices, smartphones and PADs which began simply as communication tools have quickly become private, customized and powerful platforms for information processing and services in recent years. During the rapid development of information technology, the Android operating system, due to its open-source characteristics, has become the most popular operating system running on intelligent mobile platform.When users using personal mobile devices, it is inevitable to leave their traces of use, which usually be preserved in the mobile equipment as a part of data source. In some certain circumstances, these left traces will be extracted and analyzed by forensics specialists or even turn into digital evidence with great significance in certain cases. In the process of digital forensics, investigation experts will perform data acquisition and forensic analysis on the prepared device by select suitable digital forensics techniques and tools according to formulated strategies based on the specific forensics requirement. Meanwhile, as high-tech crimes have experienced a rapid increase in numbers, various types of cases involving the means of crime with a growing tendency to be digitized and diversify which aroused the concern of research on digital forensics techniques and digital forensics tools. The study found that research on digital forensics technology is currently emerged in China, level of research both on forensics technique and forensics tool are lower than other countries.This study analyzes and summarizes several categories of existing digital forensics key techniques by study and survey the present situation of digital forensics technology. At the same time, it proposes two innovative digital forensics analysis methods- analysis of abnormal steganography in digital forensics, and user behavior analysis using association algorithm. In addition, following the study and analysis of the current situation of existing digital forensics tools, an innovative ontology-based digital forensics system framework oriented to Android-based mobile device has been designed, and then a novel digital forensics model for Android-based devices based on an open-source forensics tool has been presented. The proposed innovative digital forensics system framework implements fundamental digital forensics functions by using key digital forensics techniques, and improves the privacy preserving performance in the process of digital forensics. By the end of this paper, challenges existing in the research work of digital forensics are pointed out and crucial development directions in the area of digital forensics are predicted.