Reverse Parsing System Of The Memory On MTK-based Mobile Phone

With the rapid development of information technology and mobile Internet,smart phones have been rapidly popularized.Especially with the development of mobile payment,mobile phones have become an indispensable tool for people to daily life,with much personal privacy imformation.However,smartphones also bring new types of cybercrime,such as telephone fraud,internet pyramid selling.The information stored in the mobile phone is very important for the detection of the entire case,which makes mobile phone forensics a hot spot in the field of digital forensics.Recently,forensic technology for mobile phones with different brands has been developing rapidly.Because of the high cost performance of low-end mobile phones,criminals often choose to use emulational mobile phones in criminal activities.Because of emulational smart phones using MTK processors much frequently,the in-depth study of the extraction and reverse analysis of the memory on MTK-based mobile phone is of great significance in the field of information security and the detection of criminal cases.Firstly,this paper describes the background and significance of the project,and introduces the research status at home and abroad.Secondly,the basic knowledge involved in the process of proj ect implementation is introduced.The goal of the system is put forward,the structure of the system is designed,the main functional modules of the system are introduced,and the technical route of system development is expounded.The data acquisition of mobile phone is deeply studied,and logical acquisition and physical acquisition are designed and implemented.For logical acquisition,the method based on root authority and backup is studied.For physical acquisition,the physical image acquisition method based on flash tool is studied.On the basis of data acquisition,the reverse analysis of data is deeply studied.And the reverse analysis of physical images,the decryption of database,the reverse analysis of voice messages and speech recognition are designed and implemented.The system implemented in this paper includes data acquisition terminal and data analysis terminal,which jointly complete the extraction and reverse analysis of mobile phone memory data.It provides an effective forensic tool for the judicial department and improves the efficiency of forensic collection.