Forensics on Android applications
View/ Open
Keywords
Forensics ; Mobile forensics ; Android application ; InvestigationAbstract
The purpose of this study is forensic analysis of specific Android applications. These were investigated in order to be examined whether they store information on device storage or not. The selected Android applications were My COSMOTE, What’s Up, My CU and OASA Telematics Android applications. The directory in which usually Android application store their data is \data\data\application_name, thus the analysis focuses primarily there. After months of investigation the results were really interesting since these Android applications used from many Android users. Findings indicate that My COSMOTE mobile Android application did not store data on user’s device and needs internet connection in order to run. What’s Up mobile Android application saves encrypted data on device so it can run without internet connection using these non-updated data. My CU mobile Android application saves user’s credentials in cleartext on their device. For this reason, without internet connection, user stay logged in but they are not able to be informed about their account details. For this activity, internet connection is required. Finally, OASA Telematics mobile Android application locates all the necessary on user’s device. However, for some operations, such as real-time bus location, internet connection is a necessary precondition.