Research On Android Smartphone Electronic Data Forensics

Android system quickly occupied the majority of the smart terminal market because of its openness and convenience,but also led to the use of android smart phone criminal behavior gradually increased,such as telecommunications fraud,money theft,smuggling drugs,online gambling and so on.This seriously affected people's lives,the study of intelligent terminal electronic data collection is very necessary.Forensic personnel caused a huge evidence of misuse in the famous n Qvod case",because there is no use of the correct evidence technology,did not follow the scientific standards.With the continuous development of android smart phones and evidence review system more and more strict,in order to avoid similar "Qvod case"problem,How to obtain electronic data from android smart phones,how to carry out process control and quality management,to ensure that the evidence of electronic data attributes,has become an urgent problem to be solved.This paper first analyzes the current situation of electronic data forensics and related technology research at home and abroad,and introduces the system characteristics of android smart phone,and puts forward six basic principles and general flow of electronic data forensics of android smart phone.A new model of electronic data forensics system is proposed,which is based on the protection of user data to ensure the integrity of electronic data,Process control and quality management and other aspects to consider,both to meet the needs of evidence and meet the regulatory requirements for electronic data collection provides a complete solution and the overall framework.The paper analyzes the contents and methods of electronic data forensics of Andrews smartphone.By analyzing the influence of some operations on data integrity,this paper puts forward the method of selecting the electronic data forensics method of Andrews smartphone.Combined with practical work,from the two aspects of ensuring the integrity of electronic data and evidence efficiency,the author puts forward a solution of full particle size integrity verification and verifies the feasibility of this method through experiment.In this paper,a kind of SVM-based classifier is designed,which can improve the efficiency of screening key evidence when dealing with a large number of documents in the practice of electronic data forensics in Andrews,and the data verify its feasibility.These work will play an active role in the theoretical research and work practices of electronic data forensics.