Volatile memory acquisition using backup for forensic investigation

Nowadays mobile phones are used all over the world for the communication purposes. The capabilities of these devices are improved during the past few years. Due to their capabilities, mobile devices are used broadly in criminal activities especially in cybercrime. The volatile data stored in mobile...

Full description

Bibliographic Details
Main Authors: Dezfouli, Farhood Norouzizadeh, Dehghantanha, Ali, Mahmod, Ramlan, Mohd Sani, Nor Fazlida, Shamsuddin, Solahuddin
Format: Conference or Workshop Item
Language:English
Published: IEEE 2012
Online Access:http://psasir.upm.edu.my/id/eprint/68824/1/Volatile%20memory%20acquisition%20using%20backup%20for%20forensic%20investigation.pdf
_version_ 1825933602646392832
author Dezfouli, Farhood Norouzizadeh
Dehghantanha, Ali
Mahmod, Ramlan
Mohd Sani, Nor Fazlida
Shamsuddin, Solahuddin
author_facet Dezfouli, Farhood Norouzizadeh
Dehghantanha, Ali
Mahmod, Ramlan
Mohd Sani, Nor Fazlida
Shamsuddin, Solahuddin
author_sort Dezfouli, Farhood Norouzizadeh
collection UPM
description Nowadays mobile phones are used all over the world for the communication purposes. The capabilities of these devices are improved during the past few years. Due to their capabilities, mobile devices are used broadly in criminal activities especially in cybercrime. The volatile data stored in mobile phones usually contain important evidences regarding the crime. However, collecting these volatile data in a forensically sound manner would not be easy. This paper proposes a new approach for acquiring the volatile data inside a mobile phone in a forensically sound manner that minimizes the chance of evidence modification or lost.
first_indexed 2024-03-06T09:59:52Z
format Conference or Workshop Item
id upm.eprints-68824
institution Universiti Putra Malaysia
language English
last_indexed 2024-03-06T09:59:52Z
publishDate 2012
publisher IEEE
record_format dspace
spelling upm.eprints-688242019-06-10T03:44:47Z http://psasir.upm.edu.my/id/eprint/68824/ Volatile memory acquisition using backup for forensic investigation Dezfouli, Farhood Norouzizadeh Dehghantanha, Ali Mahmod, Ramlan Mohd Sani, Nor Fazlida Shamsuddin, Solahuddin Nowadays mobile phones are used all over the world for the communication purposes. The capabilities of these devices are improved during the past few years. Due to their capabilities, mobile devices are used broadly in criminal activities especially in cybercrime. The volatile data stored in mobile phones usually contain important evidences regarding the crime. However, collecting these volatile data in a forensically sound manner would not be easy. This paper proposes a new approach for acquiring the volatile data inside a mobile phone in a forensically sound manner that minimizes the chance of evidence modification or lost. IEEE 2012 Conference or Workshop Item PeerReviewed text en http://psasir.upm.edu.my/id/eprint/68824/1/Volatile%20memory%20acquisition%20using%20backup%20for%20forensic%20investigation.pdf Dezfouli, Farhood Norouzizadeh and Dehghantanha, Ali and Mahmod, Ramlan and Mohd Sani, Nor Fazlida and Shamsuddin, Solahuddin (2012) Volatile memory acquisition using backup for forensic investigation. In: 2012 International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec), 26-28 June 2012, Kuala Lumpur, Malaysia. (pp. 186-189). 10.1109/CyberSec.2012.6246108
spellingShingle Dezfouli, Farhood Norouzizadeh
Dehghantanha, Ali
Mahmod, Ramlan
Mohd Sani, Nor Fazlida
Shamsuddin, Solahuddin
Volatile memory acquisition using backup for forensic investigation
title Volatile memory acquisition using backup for forensic investigation
title_full Volatile memory acquisition using backup for forensic investigation
title_fullStr Volatile memory acquisition using backup for forensic investigation
title_full_unstemmed Volatile memory acquisition using backup for forensic investigation
title_short Volatile memory acquisition using backup for forensic investigation
title_sort volatile memory acquisition using backup for forensic investigation
url http://psasir.upm.edu.my/id/eprint/68824/1/Volatile%20memory%20acquisition%20using%20backup%20for%20forensic%20investigation.pdf
work_keys_str_mv AT dezfoulifarhoodnorouzizadeh volatilememoryacquisitionusingbackupforforensicinvestigation
AT dehghantanhaali volatilememoryacquisitionusingbackupforforensicinvestigation
AT mahmodramlan volatilememoryacquisitionusingbackupforforensicinvestigation
AT mohdsaninorfazlida volatilememoryacquisitionusingbackupforforensicinvestigation
AT shamsuddinsolahuddin volatilememoryacquisitionusingbackupforforensicinvestigation