Forensics for Korean cell phone

  • Authors:
  • Keonwoo Kim;Dowon Hong;Kyoil Chung

  • Affiliations:
  • ETRI, Gajeong-dong, Yuseong-gu, Daejeon, Korea;ETRI, Gajeong-dong, Yuseong-gu, Daejeon, Korea;ETRI, Gajeong-dong, Yuseong-gu, Daejeon, Korea

  • Venue:
  • Proceedings of the 1st international conference on Forensic applications and techniques in telecommunications, information, and multimedia and workshop
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Cell phone forensics to acquire and analyze data in the cellular phone is nowadays being used in a national investigation organization and a private company. In order to collect cellular phone flash memory data, we have two methods. First method is a logical approach which acquires files and directories from the file system of the cell phone flash memory. Secondly, we can get all data from bit-by-bit copy of entire physical memory using a low level access method. In this paper, we describe a forensic tool to acquire cell phone flash memory data using a logical level approach. By our tool, we can get EFS file system and peek memory data with an arbitrary region from some Korean CDMA cell phones.