상세정보
학술대회
Forensics for Korean Cell Phone
- 발행일
- 200801
- 출처
- International Conference on Forensic Applications and Techniques in Telecommunications, Information, and Multimedia and Workshop (e-Forensics) 2008, pp.1-4
- 협약과제
- 07MK2100, 정보투명성 보장형 디지털 포렌식 시스템 개발, 홍도원
- 초록
- Cell phone forensics to acquire and analyze data in the cellular phone is nowadays being used in a national investigation organization and a private company. In order to collect cellular phone flash memory data, we have two methods. First method is a logical approach which acquires files and directories from the file system of the cell phone flash memory. Secondly, we can get all data from bit-by-bit copy of entire physical memory using a low level access method. In this paper, we describe a forensic tool to acquire cell phone flash memory data using a logical level approach. By our tool, we can get EFS file system and peek memory data with an arbitrary region from some Korean CDMA cell phones.
- KSP 제안 키워드
- Access method, Cell Phone Forensics, File System, Flash Memory, Physical Memory, cellular phone, first method, forensic tool, low level