Photo Forensics on Shanzhai Mobile Phone

详细信息    查看全文

• 作者：Gang Zhou (22)
  Yanbin Tang (23)
  Junbin Fang (23) (24)
  Zoe L. Jiang (25)
  K. P. Chow (23)
  S. M. Yiu (23)
  Lucas C. K. Hui (23)
  Rougsheng Xu (26)
  Yonghao Mai (27)
  Shuhui Hou (28)
  Fei Xu (29)
  
• 关键词：Shanzhai mobile phone ; photo forensics ; file carving ; MediaTek
• 刊名：Lecture Notes in Computer Science
• 出版年：2013
• 出版时间：2013
• 年：2013
• 卷：7992
• 期：1
• 页码：465-473
• 全文大小：650KB
• 参考文献：1. Worldwide Mobile Phone Market Grew 20陌n: Q1 2011, Fueled By Smartphone Boom (2011), http://techcrunch.com/2011/04/28/worldwide-mobile-phone-market-grew-20-in-q1-fueled-by-smartphone-boom
  2. Dual-core smartphones: The next mobile arms race (2011), http://www.silicon.com/technology/mobile/2011/01/12/dual-core-smartphones-the-next-mobile-arms-race-39746799
  3. Mislan, R.: Cellphone crime solvers. IEEE Spectrum聽47, 34鈥?9 (2010) CrossRef
  4. Fake iPhone 4G Mobile Phone Hits Shanzhai Market (2010), http://www.suite101.com/news/fake-iphone-4g-mobile-phone-hits-shanzhai-market-a234058
  5. MediaTek, http://www.mediatek.com
  6. Spreadtrum, http://www.Spreadtrum.com
  7. McCarthy, P.: Forensic analysis of mobile phones. Master thesis, University of South Australia (2005)
  8. Breeuwsma, M., Jongh, M., Klaver, C., Knijff, R., Roeloffs, M.: Forensic Data Recovery from Flash Memory. Small Scale Digital Device Forensics Journal聽1, 1鈥?7 (2007)
  9. Expert: 鈥楩lasher鈥?technology digs deeper for digital evidence, http://www.physorg.com/news95611284.html
  10. Gratzer, V., Naccache, D.: Cryptography, Law Enforcement, and Mobile Communications. IEEE Security and Privacy聽4, 67鈥?0 (2006) CrossRef
  11. Willassen, S.: Forensic Analysis of Mobile Phone Internal Memory. In: IFIP The International Federation for Information Processing, Advances in Digital Forensics IV, pp. 191鈥?04. Springer, Boston (2005)
  12. Zhang, Z.W.: The research of MTK mobile phones flash file system recovery. Netinfo Security聽11, 34鈥?6 (2010)
  13. Fang, J., Jiang, Z.L., He, M., Yiu, S.M., Hui, L.C.K., Chow, K.P., Zhou, G.: Investigating and Analyzing the Web-based Contents on Chinese Shanzhai Mobile Phones. In: Seventh IEEE International Workshop on Systematic Approaches to Digital Forensic Engineering (IEEE/SADFE 2012), Vancouver BC, Canada, pp. 1鈥?4 (2012)
  14. Fang, J., Jiang, Z.L., Chow, K.P., Yiu, S.M., Hui, L.C.K., Zhou, G., He, M., Tang, Y.: Forensic Analysis of Pirated Chinese Shanzhai Mobile Phones. In: Eighth Annual IFIP WG 11.9 International Conference on Digital Forensics, Advances in Digital Forensics VIII, pp. 117鈥?30. Springer, Boston (2012)
  15. Karresand, M., Shahmehri, N.: Oscar-file type identification of binary data in disk clusters and RAM pages. In: IFIP International Federation for Information Processing, Security and Privacy in Dynamic Environments, vol.聽201, pp. 413鈥?24. Springer, Boston (2006)
  16. Karresand, M., Shahmehri, N.: File type identification of data fragments by their binary structure. In: 2006 IEEE Workshop on Information Assurance, pp. 140鈥?47. IEEE Press, New York (2006) CrossRef
  17. Calhoun, W.C., Coles, D.: Predicting the types of file fragments. Digital Investigation聽5, s14鈥搒20 (2008)
  18. JPEG Standard (JPEG ISO/IEC 10918-1 ITU-T Recommendation T.81), http://www.w3.org/Graphics/JPEG/itu-t81.pdf
  19. Garfinkel, S.: Carving Contiguous and Fragmented Files with Fast Object Validation. Digital Investigation聽4S, s2鈥搒12 (2007)
  
• 作者单位：Gang Zhou (22)
  Yanbin Tang (23)
  Junbin Fang (23) (24)
  Zoe L. Jiang (25)
  K. P. Chow (23)
  S. M. Yiu (23)
  Lucas C. K. Hui (23)
  Rougsheng Xu (26)
  Yonghao Mai (27)
  Shuhui Hou (28)
  Fei Xu (29)
  
  22. Wuhan Engineering Science and Technology Institute, Wuhan, China
  23. Department of Computer Science, The University of Hong Kong, Hong Kong SAR, China
  24. Department of Optoelectronic Engineering, Jinan University, Guangzhou, China
  25. Harbin Institute of Technology Shenzhen Graduate School, Shenzhen, China
  26. Institute of High Energy Physics, Chinese Academy of Sciences, China
  27. Hubei University of Police, China
  28. Department of Information and Computing Science, University of Science and Technology Beijing, China
  29. Institute of Information Engineering, Chinese Academy of Sciences, China
  

文摘

There is an increasing number of crime cases involving mobile phones. In particular, due to the low cost of China shanzhai mobile phone (Chinese pirated mobile phone), a significant portion of these crime cases (all over the world) is related to these shanzhai phones. Quite a number of the cases also involve pictures. The difficulty of conducting forensic investigation on shanzhai phones is the lack of specifications. In this paper, we try to provide some important information of how a photo is stored inside a MTK-based shanzhai phone (one of the most popular platforms for shanzhai phones), and provide a method to recover deleted photos from the physical segments of flash memory of a shanzhai phone. abstract environment.