Forensic acquisitions of WhatsApp data on popular mobile platforms

Hannan Azhar; A. Shortall

Forensic acquisitions of WhatsApp data on popular mobile platforms

Hannan Azhar
, A. Shortall

Research output: Chapter in Book/Report/Conference proceeding › Chapter

Abstract

Encryption techniques used by popular messaging services such as Skype, Viber and WhatsApp make traces of illegal activities by criminal groups almost undetectable. This paper reports challenges involved to examine data of the WhatsApp application on popular mobile platforms (iOS, Android and Windows Phone) using latest forensic software such as EnCase, UFED and Oxygen Forensic Suite. The operating systems used were Windows phone 8.1, Android 5.0.1 (Lollipop) and iOS 8.3. Results show that due to strong security features built into the Windows 8.1 system forensic examiners may not be able to access data with standard forensic suite and they must decide whether to perform a live forensic acquisition. This paper provides forensics examiners with practical techniques for recovering evidences of WhatsApp data from Windows 8.1 mobile operating systems that would otherwise be inaccessible.

Original language	English
Title of host publication	Proceedings of the Sixth International Conference on Emerging Security Technologies
Publisher	IEEE
Pages	13-17
ISBN (Print)	9781467397995
Publication status	Published - 2015

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 16 Peace, Justice and Strong Institutions

Access to Document

13778.pdfFinal published version, 564 KB

Cite this

@inbook{f0a9b5c78b6146239469a191bfce7a0f,

title = "Forensic acquisitions of WhatsApp data on popular mobile platforms",

abstract = "Encryption techniques used by popular messaging services such as Skype, Viber and WhatsApp make traces of illegal activities by criminal groups almost undetectable. This paper reports challenges involved to examine data of the WhatsApp application on popular mobile platforms (iOS, Android and Windows Phone) using latest forensic software such as EnCase, UFED and Oxygen Forensic Suite. The operating systems used were Windows phone 8.1, Android 5.0.1 (Lollipop) and iOS 8.3. Results show that due to strong security features built into the Windows 8.1 system forensic examiners may not be able to access data with standard forensic suite and they must decide whether to perform a live forensic acquisition. This paper provides forensics examiners with practical techniques for recovering evidences of WhatsApp data from Windows 8.1 mobile operating systems that would otherwise be inaccessible.",

author = "Hannan Azhar and A. Shortall",

year = "2015",

language = "English",

isbn = "9781467397995",

pages = "13--17",

booktitle = "Proceedings of the Sixth International Conference on Emerging Security Technologies",

publisher = "IEEE",

}

TY - CHAP

T1 - Forensic acquisitions of WhatsApp data on popular mobile platforms

AU - Azhar, Hannan

AU - Shortall, A.

PY - 2015

Y1 - 2015

N2 - Encryption techniques used by popular messaging services such as Skype, Viber and WhatsApp make traces of illegal activities by criminal groups almost undetectable. This paper reports challenges involved to examine data of the WhatsApp application on popular mobile platforms (iOS, Android and Windows Phone) using latest forensic software such as EnCase, UFED and Oxygen Forensic Suite. The operating systems used were Windows phone 8.1, Android 5.0.1 (Lollipop) and iOS 8.3. Results show that due to strong security features built into the Windows 8.1 system forensic examiners may not be able to access data with standard forensic suite and they must decide whether to perform a live forensic acquisition. This paper provides forensics examiners with practical techniques for recovering evidences of WhatsApp data from Windows 8.1 mobile operating systems that would otherwise be inaccessible.

AB - Encryption techniques used by popular messaging services such as Skype, Viber and WhatsApp make traces of illegal activities by criminal groups almost undetectable. This paper reports challenges involved to examine data of the WhatsApp application on popular mobile platforms (iOS, Android and Windows Phone) using latest forensic software such as EnCase, UFED and Oxygen Forensic Suite. The operating systems used were Windows phone 8.1, Android 5.0.1 (Lollipop) and iOS 8.3. Results show that due to strong security features built into the Windows 8.1 system forensic examiners may not be able to access data with standard forensic suite and they must decide whether to perform a live forensic acquisition. This paper provides forensics examiners with practical techniques for recovering evidences of WhatsApp data from Windows 8.1 mobile operating systems that would otherwise be inaccessible.

UR - http://www.est-conf.org/est2015/

M3 - Chapter

SN - 9781467397995

SP - 13

EP - 17

BT - Proceedings of the Sixth International Conference on Emerging Security Technologies

PB - IEEE

ER -

Forensic acquisitions of WhatsApp data on popular mobile platforms

Abstract

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this