在Android操作系统中对文件清除应用程序进行法医分析和评估
Dong Bin Oh1, Somi Lim2, Suji Lee3
1School of Cybersecurity Korea University, Seoul, Korea.
Journal of forensic sciences
|September 5, 2025
概括
在Android上删除文件的应用程序往往无法安全地删除数据, 我们的研究表明这些工具缺乏标准,
科学领域:
- 数字法医
- 网络安全
- 移动计算
背景情况:
- 扫除文件等反法医技术阻碍了数字调查.
- 文件擦除的目的是通过覆盖数据来永久销毁数据.
- 在Android上的文件清除应用程序的有效性在很大程度上尚未评估.
研究的目的:
- 评估Android上的文件擦除应用程序的反法医有效性.
- 识别文件删除工具中的漏洞和不符合标准.
- 开发一个用于检测Android设备上的文件擦除痕迹的框架.
主要方法:
- 从Google Play商店选择和分析六个文件清除应用程序.
- 使用逆向工程和数字法医工具进行深入检查.
- 在擦除过程中生成的Android操作系统和应用程序文物.
主要成果:
- 一个应用错误地宣称删除文件,只执行删除文件.
- 文件删除应用程序显示不符合既定标准.
- 有关工具执行的证据和已删除文件的残留文物被成功识别.
结论:
- 在Android上的文件擦除应用程序对调查人员来说存在重大挑战和潜在的弱点.
- 提出了一个新的评估框架,以帮助检测清除活动并推断删除的数据.
- 这些发现增强了数字法医在移动设备上处理反法医技术的能力.
相关概念视频
Censoring Survival Data
223
Survival analysis is a statistical method used to analyze time-to-event data, often employed in fields such as medicine, engineering, and social sciences. One of the key challenges in survival analysis is dealing with incomplete data, a phenomenon known as "censoring." Censoring occurs when the event of interest (such as death, relapse, or system failure) has not occurred for some individuals by the end of the study period or is otherwise unobservable, and it might have many different...
223
Deleterious Substances in Aggregate
246
Deleterious substances in aggregates can be detrimental to the quality and durability of concrete. These substances include organic impurities like loam, which interfere with cement hydration and are usually present in the sand. These prevent a good bond between aggregate and cement paste. Organic impurities can be detected using the colorimetric test, where the darkness of a solution after agitation indicates the level of organic content.
Another type of impurity is clay and fine material that...
Another type of impurity is clay and fine material that...
246
Sample Preparation for Analysis: Advanced Techniques
441
Accurate analysis of complex samples often requires advanced preparation techniques to achieve reliable and reproducible results. Samples containing inorganic or organic materials can be challenging to dissolve or decompose effectively. Standard sample preparation methods include acid digestion, fusion, dry ashing, and wet digestion.
Acid digestion with strong acids is commonly used to dissolve inorganic materials that are insoluble (do not dissolve) in water. This method can be useful for...
Acid digestion with strong acids is commonly used to dissolve inorganic materials that are insoluble (do not dissolve) in water. This method can be useful for...
441
Sample Preparation for Analysis: Overview
316
Sample preparation is an essential step in the analytical process. It involves preparing a sample so that it can be analyzed accurately. The goal is to extract the analyte, the substance you want to measure, from the sample while removing any components that may interfere with the analysis. Sample preparation techniques vary depending on the physical state of the sample.
Bulk or large solid samples are typically reduced in size using grinding, crushing, or milling techniques to increase the...
Bulk or large solid samples are typically reduced in size using grinding, crushing, or milling techniques to increase the...
316


