Research On Electronic Forensics Technique Based On Android

The growing popularity of Android mobile phone brings great convenience to the people,however some criminals can also take advantage of the phone,the use of artificial methods from the Android mobile device data extraction of useful judicial evidence increasingly difficult.However,common text categorization techniques deal with long text and high dimensional feature,but it does not consider the problem of short text feature sparsity,nor does it take into account the problem of synonym substitution of illegal elements during communication,so that the results of the evidence is not very comprehensive.In this thesis,a semantic similarity calculation method based on Chinese WordNet and Synonyms Extension is proposed to extend the feature of short text and use the similarity to calculate the corresponding feature weight.Then,Integrity of the Android phone forensics design.The main research work of this paper includes:First of all,research on the Android mobile phone architecture and data storage,define the source and location of evidence,induction data acquisition and analysis of the processing methods.At the same time,research on the commonly used text classification technology,introduced the technology in the Android mobile phone information forensics application of the deficiencies and improved methods.Then,an improved word similarity calculation method is proposed.This method makes full use of the characteristics of the two lexical dictionaries of Chinese WordNet and Synonyms Extended Dictionary.According to the different distribution of words in the two dictionaries and the number of words in them,the dynamic weighting strategy is used to calculate the similarity,which makes the calculation result more accurate,which makes the expanded feature set highly aggregated and improves the recall and precision of short text classification.Finally,this thesis presents a complete Android mobile phone forensics research program from the data extraction,analysis,preservation and other aspects of the forensic process in detail,and then use the similarity calculation to expand the classification of the actual results of classification methods by the experiment.The experiment results show that the using of WordNet and Synonyms Extension to compute the word similarity in short text classification in Android forensics improve the precision and recall of evidence analysis.