A B S T R A C T
Interpretation of traces found on Android devices is an important aspect of mobile forensics.
This is especially true for timestamps encountered on the device under investigation.
In the presence of both naive and UTC timestamps, some form of timestamp
normalisation is required. In addition, the investigator needs to gain some understanding
of potential clock skew that may exist, especially when evidence from the device under
investigation has to be correlated to real world events or evidence from other devices. A
case study is presented where the time zone on the Android device was set incorrectly,
while the clock was set to correspond to the time zone where the device was actually
located. Initially, the fact that both time zones enforced daylight saving time (DST) at
different periods was expected to complicate the timestamps normalisation. However, it
was found that the version of the Time Zone Database on the device was outdated and did
not correspond to the actual time zone rules for the given period. After the case study, the
results of experiments on a broader range of devices are presented. Among other things,
these results demonstrate a method to detect clock skew based on the mmssms.db
database. However, it was also found that the applicability of this method is highly
dependent on specific implementation choices made by different vendors.
ª 2014 Elsevier Ltd. All rights reserved.
[aio_button align=”none” animation=”none” color=”red” size=”small” icon=”none” text=”انجام مقاله علمی پژوهشی و ISI در این زمینه” target=”_blank” relationship=”dofollow” url=”http://payannameha.ir/?p=796″]
[aio_button align=”none” animation=”none” color=”orange” size=”small” icon=”none” text=”دریافت سایر مقالات در این زمینه” target=”_blank” relationship=”dofollow” url=”http://payannameha.ir/?page_id=297″]
[aio_button align=”none” animation=”none” color=”blue” size=”small” icon=”none” text=”انجام پایان نامه در این حوزه” relationship=”dofollow” url=”http://payannameha.ir/?page_id=3206″]
[aio_button align=”none” animation=”none” color=”pink” size=”small” icon=”none” text=”انجام پروپوزال در این حوزه” target=”_blank” relationship=”dofollow” url=”http://payannameha.ir/?page_id=3206″]
[aio_button align=”none” animation=”none” color=”green” size=”small” icon=”none” text=”ترجمه تخصصی این مقاله” target=”_blank” relationship=”dofollow” url=”http://payannameha.ir/?p=154″]
جهت خرید فایل به انتهای صفحه مراجعه نمایید
کد محصول : شماره 8
[aio_button align=”none” animation=”none” color=”green” size=”small” icon=”none” text=”پرداخت کارت به کارت” target=”_blank” relationship=”dofollow” url=”http://jozvekade.ir/?page_id=1139″]