Paper Info
Title
IMO forensics in Android and windows systems
Abstract
Smartphone forensics is currently gaining more attention because of their widespread in the market. Smart devices are provisioned with wide range of applications that extend their capabilities and features. IMO Instant Messaging (IM) application is a mobile application that allows making audio and video calls, chat messages, share photos and videos, and group chatting. The increased usage of IM applications on Android phones has turned to be a source for mobile and computer forensic investigators. This paper aims to investigate the IMO App in Android and Windows systems from forensics perspective. We perform real chats and calls in different scenarios. We extract the artifacts from the NAND flash memory in Android and from the main memory (RAM) in Windows platform. Our results show that important data can still be recovered even after deleting chats and uninstalling the app.
Year
DOI
Venue
2017
10.1109/IISA.2017.8316377
2017 8th International Conference on Information, Intelligence, Systems & Applications (IISA)
Keywords
Field
DocType
digital forensics,android forensics,IMO artifacts,evidence,acquisition,volatility,autopsy
Nand flash memory,Android forensics,Android (operating system),Digital forensics,Computer science,Instant messaging,Provisioning,Multimedia
Conference
ISSN
ISBN
Citations 
2379-3732
978-1-5386-3732-6
0
PageRank 
References 
Authors
0.34
0
3
Name
Order
Citations
PageRank
Ahmad Ababneh101.01
Mohammad Abu Awwad200.34
Mohammed I. Al-Saleh3265.67