基于Android系统的取证技术分析

Android系统在智能手机、平板电脑中有着广泛的应用,研究利用Android系统漏洞成为计算机取证技术新的应用领域。文章通过分析Android系统特点,介绍了常见的Android系统漏洞和Root工具,研究了利用Android系统破解过程,利用的漏洞来实现Android设备取证过程中获取数据、恢复删除数据、获取系统内存镜像和绕过开机密码等课题。

Forensics Analysis Based Android

Android system has a wide range of application in both smart phone and tablet PC’s area.Researching and using Android system vulnerabilities is becoming a new application area of computer forensics technology.The article introduced the Android system vulnerabilities and Root tools through analyzing the characteristics of the Android system.Meanwhile it reseached the root tool applications in the evidence collection process,such as obtaining data,recovering deleted data,getting system memory mirroring and bypassing the bootpasswords and other issue.