Integrity Preservation of Android Evidence in Trusted Way

Abstract

In the modern era, computer systems are used everywhere. With increasing use of computers, the number of cybercrimes is also increasing. Computer forensic is a sub-branch of forensic science which defines procedures and techniques to investigate the cybercrimes. Computer forensic, with its sub-branches, is a relatively new field as compared to other fields of computer science. Mobile device forensic is one of its sub-branch. Evidence collection and integrity preservation are the main concerns of mobile device forensic. Currently, there are some standards defined by different organizations such as NIST to perform these steps. But there are still many security issues that need to be resolved. One of these issues is the lack of trust in the integrity of the evidence collected from the mobile device. The second one is to ensure that evidence is collected according to privacy laws. Third issue is the authentication of the examiner. We have proposed a model based on trusted platform module for trusted evidence collection, a smart card for the authenticity of examiner and GPS device for geolocation to overcome these problems.