Research Of Information Extraction And Recovery Based On Android OS

With the rapid development of mobile phone technology. Smart phone has not only become indispensable contact tools in people’s daily life, but also gradually developed into learning, entertainment tools which can deal with many daily issues instead of computers. Coincided with the popularization of mobile phone, they are also used by criminals as means and tools to commit an offence, the phenomenon of using the phone in criminal activities is increasingly serious. The information contained within the smart phone has become vital criminal investigation clues and sources of evidence.Based on the research background, analyzing the current research status and trends of mobile phone forensics, this paper designs a mobie phone forensics system based on the Android os platform. Firstly, introduced the background knowledge applied during the system development process, then carried out a detailed and accurate analysis of the requirement of mobile phone forensics, propose the overall framwork of forensic system, introduces the key technology applied in the information extraction process, makes concrete analysis of each system functional moduleincluding the module of information collection amd socket transmission. Realizing the client module of mobile phone and the service module of PC, achieves the target of the forensics of mobile phone.This paper adopts a new method which combing logical analysis and physical analysis during the developing process. Logical analysis uses the file system to find and analyses database files that come with each application and extract valuable information; physical analysis restore deleted files through in-depth analysis of the SQLite database file structure and addressing modes to data records.Through the testing, the system has successfully achieved user information and, data extraction and recovery, also succeed in realizing the prospected design objective.