ETRI-Knowledge Sharing Plaform

ENGLISH

성과물

논문 검색
구분 SCI
연도 ~ 키워드

상세정보

학술대회 Forensics for Korean Cell Phone
Cited 3 time in scopus Download 1 time Share share facebook twitter linkedin kakaostory
저자
김건우, 홍도원, 정교일
발행일
200801
출처
International Conference on Forensic Applications and Techniques in Telecommunications, Information, and Multimedia and Workshop (e-Forensics) 2008, pp.1-4
DOI
https://dx.doi.org/10.4108/e-forensics.2008.2755
협약과제
07MK2100, 정보투명성 보장형 디지털 포렌식 시스템 개발, 홍도원
초록
Cell phone forensics to acquire and analyze data in the cellular phone is nowadays being used in a national investigation organization and a private company. In order to collect cellular phone flash memory data, we have two methods. First method is a logical approach which acquires files and directories from the file system of the cell phone flash memory. Secondly, we can get all data from bit-by-bit copy of entire physical memory using a low level access method. In this paper, we describe a forensic tool to acquire cell phone flash memory data using a logical level approach. By our tool, we can get EFS file system and peek memory data with an arbitrary region from some Korean CDMA cell phones.
키워드
Acquisition, Cell phone, Flash memory, Forensics, Logical method
KSP 제안 키워드
Access method, Cell Phone Forensics, File System, Flash Memory, Logical method, Physical Memory, cellular phone, first method, forensic tool, low level