A metamodel for mobile forensics investigation domain

Area of Science:

• Digital Forensics
• Information Science

Background:

• Mobile phones are crucial in crime fighting and criminal investigations.
• Investigators face challenges due to dispersed and ambiguous mobile forensics knowledge.
• This ambiguity hinders new investigators and leads to wasted time.

Purpose of the Study:

• To develop a metamodeling approach for the mobile forensics domain.
• To identify common concepts and standardize terminology in mobile forensics.
• To simplify the investigation process and enhance knowledge management.

Main Methods:

• Development of a Mobile Forensics Metamodel (MFM).
• Validation of the MFM using two improvement and adjustment techniques.
• Iterative refinement leading to the final MFM 1.2 version.

Main Results:

• The Mobile Forensics Metamodel (MFM) was successfully developed and validated.
• The MFM identifies common concepts, reducing ambiguity in mobile forensics.
• The approach supports knowledge capture, reuse, and training for investigators.

Conclusions:

• Metamodeling provides a structured approach to address knowledge dispersion in mobile forensics.
• The MFM simplifies investigations, aids knowledge management, and reduces ambiguity.
• This work contributes to more efficient and standardized mobile forensics practices.