Volatile memory acquisition using backup for forensic investigation
Nowadays mobile phones are used all over the world for the communication purposes. The capabilities of these devices are improved during the past few years. Due to their capabilities, mobile devices are used broadly in criminal activities especially in cybercrime. The volatile data stored in mobile...
| Main Authors: | , , , , |
|---|---|
| Format: | Conference or Workshop Item |
| Language: | English |
| Published: |
IEEE
2012
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/68824/ http://psasir.upm.edu.my/id/eprint/68824/1/Volatile%20memory%20acquisition%20using%20backup%20for%20forensic%20investigation.pdf |
| _version_ | 1848856236186927104 |
|---|---|
| author | Dezfouli, Farhood Norouzizadeh Dehghantanha, Ali Mahmod, Ramlan Mohd Sani, Nor Fazlida Shamsuddin, Solahuddin |
| author_facet | Dezfouli, Farhood Norouzizadeh Dehghantanha, Ali Mahmod, Ramlan Mohd Sani, Nor Fazlida Shamsuddin, Solahuddin |
| author_sort | Dezfouli, Farhood Norouzizadeh |
| building | UPM Institutional Repository |
| collection | Online Access |
| description | Nowadays mobile phones are used all over the world for the communication purposes. The capabilities of these devices are improved during the past few years. Due to their capabilities, mobile devices are used broadly in criminal activities especially in cybercrime. The volatile data stored in mobile phones usually contain important evidences regarding the crime. However, collecting these volatile data in a forensically sound manner would not be easy. This paper proposes a new approach for acquiring the volatile data inside a mobile phone in a forensically sound manner that minimizes the chance of evidence modification or lost. |
| first_indexed | 2025-11-15T11:38:27Z |
| format | Conference or Workshop Item |
| id | upm-68824 |
| institution | Universiti Putra Malaysia |
| institution_category | Local University |
| language | English |
| last_indexed | 2025-11-15T11:38:27Z |
| publishDate | 2012 |
| publisher | IEEE |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | upm-688242019-06-10T03:44:47Z http://psasir.upm.edu.my/id/eprint/68824/ Volatile memory acquisition using backup for forensic investigation Dezfouli, Farhood Norouzizadeh Dehghantanha, Ali Mahmod, Ramlan Mohd Sani, Nor Fazlida Shamsuddin, Solahuddin Nowadays mobile phones are used all over the world for the communication purposes. The capabilities of these devices are improved during the past few years. Due to their capabilities, mobile devices are used broadly in criminal activities especially in cybercrime. The volatile data stored in mobile phones usually contain important evidences regarding the crime. However, collecting these volatile data in a forensically sound manner would not be easy. This paper proposes a new approach for acquiring the volatile data inside a mobile phone in a forensically sound manner that minimizes the chance of evidence modification or lost. IEEE 2012 Conference or Workshop Item PeerReviewed text en http://psasir.upm.edu.my/id/eprint/68824/1/Volatile%20memory%20acquisition%20using%20backup%20for%20forensic%20investigation.pdf Dezfouli, Farhood Norouzizadeh and Dehghantanha, Ali and Mahmod, Ramlan and Mohd Sani, Nor Fazlida and Shamsuddin, Solahuddin (2012) Volatile memory acquisition using backup for forensic investigation. In: 2012 International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec), 26-28 June 2012, Kuala Lumpur, Malaysia. (pp. 186-189). 10.1109/CyberSec.2012.6246108 |
| spellingShingle | Dezfouli, Farhood Norouzizadeh Dehghantanha, Ali Mahmod, Ramlan Mohd Sani, Nor Fazlida Shamsuddin, Solahuddin Volatile memory acquisition using backup for forensic investigation |
| title | Volatile memory acquisition using backup for forensic investigation |
| title_full | Volatile memory acquisition using backup for forensic investigation |
| title_fullStr | Volatile memory acquisition using backup for forensic investigation |
| title_full_unstemmed | Volatile memory acquisition using backup for forensic investigation |
| title_short | Volatile memory acquisition using backup for forensic investigation |
| title_sort | volatile memory acquisition using backup for forensic investigation |
| url | http://psasir.upm.edu.my/id/eprint/68824/ http://psasir.upm.edu.my/id/eprint/68824/ http://psasir.upm.edu.my/id/eprint/68824/1/Volatile%20memory%20acquisition%20using%20backup%20for%20forensic%20investigation.pdf |