Android malware traceability matrix for digital forensic investigation

Mohammad Shahini, A’aisyah Mardhiyyah (2017) Android malware traceability matrix for digital forensic investigation. Project Report. Melaka, Malaysia, Universiti Teknikal Malaysia Melaka. (Submitted)

Text (Full Text) Android malware traceability matrix for digital forensic investigation.pdf - Submitted Version Download (2MB)

Abstract

The objective of digital forensic investigation process in a cybercrime is to preserve any evidence in its most original form while performing a structured investigation by collecting, identifying and validating the digital information for the purpose of reconstructing past events while maintaining the chain of custody. With the current scenario, mobile technology has also exposes to cybercrime, this has make the investigation process more complex. The traceability process has become a crucial part of the digital investigation process because it is capable to map the events of an incident from different sources in collecting evidence of an incident to be used for other additional investigation aspects. The need of finding and mapping evidence in Android platform has also becoming more important. Thus, this project proposes the adaptability of the traceability matrix to represent the relationship in the digital forensic investigation process by assimilating the traceability features in the mobile technology environment especially on Android. The objective of this project is to identify, analyze and construct Android malware traces for forensic investigation and show the link between the evidence, the entities and the sources related in the process. Besides, the proposed project is expected to assist the forensic investigator in gaining accurate and complete evidence that can be further used in a court of law. To make it real, there are four phases that had been conducted. The first phase was a literature review where a detailed study of the traceability issues that involved to mobile forensic. The second phase was analyzing data set while the third phase was a construction of the traceability matrix and the last phase was completing the documentation.

Actions (login required)

View Item