Student help : Andr...
 
Notifications
Clear all

Student help : Android Anti forensic literature

14 Posts
7 Users
0 Reactions
1,009 Views
(@kashif)
Active Member
Joined: 11 years ago
Posts: 9
Topic starter  

roll roll roll roll roll roll roll roll roll roll roll roll roll roll roll roll

Good Day Forensic Xperts

As a part of semester project I wish to work on Anti Forensics

Can you please point me to the right direction, where to look for anti forensic material, i could only find one white paper so far and that was using CynogenMod.

Idea - I

Just like windows offers encrypted disk drives, i want to come up and implement an encrypted disk drive for android which asks user credentials at boot time. Is it possible ? any work done in this field?

Idea -II

Read anti forensics literature and help contribute by giving my own suggestions.

time I have for this project is limited to few weeks only.

Any ideas or suggestions are welcome,

Thanks for reading this.


   
Quote
(@kashif)
Active Member
Joined: 11 years ago
Posts: 9
Topic starter  

so many views and not a single reply


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

so many views and not a single reply

Well, now you have one.

Point is that what you posted makes little sense (no offence intended).

Imagine that an art student has these ideas
1) Paint Mona Lisa.
or
2) Review all paintings in the world and provide my suggestions on them.

And posts them with the specifications that he has only a few weeks to do the one or the other.

Basically your "ideas" are either too complex/vast or the time allowance you declared for them is too little for any practical progress on them, besides this they are probably not entirely "new" either
http//security.stackexchange.com/questions/10529/are-there-actually-any-advantages-to-android-full-disk-encryption
http//nemesis2.qx.net/pages/LUKSManager
http//code.google.com/p/cryptonite/

jaclaz


   
ReplyQuote
(@techjunkieguy)
Active Member
Joined: 11 years ago
Posts: 8
 

Look up the android phone "Black phone". It's supposed to be a secure phone with services for end to end encryption.


   
ReplyQuote
(@kashif)
Active Member
Joined: 11 years ago
Posts: 9
Topic starter  

Bundle of thanks
techjunkieguy and jaclaz
I will start working on these topics and see where it takes me.


   
ReplyQuote
(@kashif)
Active Member
Joined: 11 years ago
Posts: 9
Topic starter  

A beautiful female student approached me and requested to join her hand in research project for

"Mobile Forensic Tools"

So Now I will be focusing on Mobile Forensic tools with some practical work on android.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

A beautiful female student approached me and requested to join her hand …

Hmmm, you make it sound like you have more interest in the "beautiful female" part of the project than in the actual "forensic tools" 😯 , but it is probably anyway "creative research". )

jaclaz


   
ReplyQuote
(@kashif)
Active Member
Joined: 11 years ago
Posts: 9
Topic starter  

Yeah jaclaz , u r absolutely right , oops …

she is so confuesed about what to do … oh man i was better off alone … lol

I need help guys ? ? ? ? , need guidance ,,,

My Goal is study two or three mobile Forensics software and then create an app which won't allow this forensic tool to work, i mean anti forensics or privacy app sort of thing.

Lastly it would be really great if i can publish my work in a paper or in journal etc …

Can someone guide me , maybe point to a research paper? or a show some direction ? oops


   
ReplyQuote
(@zergling)
Eminent Member
Joined: 13 years ago
Posts: 38
 

Basically its how long can you delay the progress of examining your data…

For android and ios devices the software looks for specific folders and knows in which database (and which table/record) the data is stored - and how (e.g. timestampformats)

So if you create your own app with its own database layout, my guess is that none of the "big forensic tools" will be able to interpret your data because the decoding is based on predefined profiles and when there is no profile for your app…end of story )

However your app most likely will show up in areas like "installed apps" or "found databases" and the examiner will have to manually decode/interpret your databases.

To further complicate this ( at least a bit ) youll probably want to use encryption for stored data or use a completly different approach on storing data (e.g. no databases at all) or both.

So all of them will fail, as long as nobody analyzes your app and creates a plugin/parser etc. for it.


   
ReplyQuote
(@kashif)
Active Member
Joined: 11 years ago
Posts: 9
Topic starter  

Zergling Vielen Dank für guidence

So forensic tools look for databases like contacts ,sms, etc.

I am thinking in the direction now how to disallow access of parrent apps .like contacts /sms etc to forensic tools …


   
ReplyQuote
Page 1 / 2
Share: