ETRI-Knowledge Sharing Plaform



논문 검색
구분 SCI
연도 ~ 키워드


학술대회 Forensics for Korean Cell Phone
Cited 3 time in scopus Download 1 time Share share facebook twitter linkedin kakaostory
김건우, 홍도원, 정교일
International Conference on Forensic Applications and Techniques in Telecommunications, Information, and Multimedia and Workshop (e-Forensics) 2008, pp.1-4
07MK2100, 정보투명성 보장형 디지털 포렌식 시스템 개발, 홍도원
Cell phone forensics to acquire and analyze data in the cellular phone is nowadays being used in a national investigation organization and a private company. In order to collect cellular phone flash memory data, we have two methods. First method is a logical approach which acquires files and directories from the file system of the cell phone flash memory. Secondly, we can get all data from bit-by-bit copy of entire physical memory using a low level access method. In this paper, we describe a forensic tool to acquire cell phone flash memory data using a logical level approach. By our tool, we can get EFS file system and peek memory data with an arbitrary region from some Korean CDMA cell phones.
KSP 제안 키워드
Access method, Cell Phone Forensics, File System, Flash Memory, Physical Memory, cellular phone, first method, forensic tool, low level