Streamlining Extraction and Analysis of Android RAM Images

Simon Broenner; Hans Höfken; Marko Schuba

Research.Publish.Connect.

*Please fill out at least one Field. *Value must be an number!

Title:
ISBN:
Year:
Acronym:
Subject:

Advanced Search Proceedings Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Title:
Author:
Affiliation:
Subject:

Advanced Search Papers Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Name:
Affiliation:
Country:
Conference:
Subject:

Advanced Search Authors Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Name:
Country:
Subject:

Advanced Search Affiliations Search

If you're looking for an exact phrase use quotation marks on text fields.

Proceedings

Proceedings Search *Please fill out at least one Field. *Value must be an number!

Title:
ISBN:
Year:
Acronym:
Subject:

Advanced Search Proceedings Search

If you're looking for an exact phrase use quotation marks on text fields.

Papers

Papers Search *Please fill out at least one Field.

Title:
Author:
Affiliation:
Subject:

Advanced Search Papers Search

If you're looking for an exact phrase use quotation marks on text fields.

Authors

Authors Search *Please fill out at least one Field.

Name:
Affiliation:
Country:
Conference:
Subject:

Advanced Search Authors Search

If you're looking for an exact phrase use quotation marks on text fields.

Advanced Search

Paper

Streamlining Extraction and Analysis of Android RAM Images

Topics: Malware Detection; Mobile Systems Security

In Proceedings of the 2nd International Conference on Information Systems Security and Privacy ICISSP - Volume 1, 255-264, 2016 , Rome, Italy

Authors: Simon Broenner ; Hans Höfken and Marko Schuba

Affiliation: Aachen University of Applied Sciences, Germany

Keyword(s): Digital Forensics, Android, Smartphone, LiME, Memory, RAM Forensics.

Abstract: The Android operating system powers the majority of the world’s mobile devices and has been becoming increasingly important in day-to-day digital forensics. Therefore, technicians and analysts are in need of reliable methods for extracting and analyzing memory images from live Android systems. This paper takes different existing, extraction methods and derives a universal, reproducible, reliably documented method for both extraction and analysis. In addition the VOLIX II front-end for the Volatility Framework is extended with additional functionality to make the analysis of Android memory images easier for technically non-adept users.

CC BY-NC-ND 4.0

Guest: Register as new SciTePress user now for free.

SciTePress user: please login.

My Papers

You are not signed in, therefore limits apply to your IP address 18.217.228.35

In the current month:

Recent papers: 100 available of 100 total

2⁺ years older papers: 200 available of 200 total

Paper citation in several formats:

Broenner, S.; Höfken, H. and Schuba, M. (2016). Streamlining Extraction and Analysis of Android RAM Images. In Proceedings of the 2nd International Conference on Information Systems Security and Privacy - ICISSP; ISBN 978-989-758-167-0; ISSN 2184-4356, SciTePress, pages 255-264. DOI: 10.5220/0005652802550264

@conference{icissp16,
author={Simon Broenner. and Hans Höfken. and Marko Schuba.},
title={Streamlining Extraction and Analysis of Android RAM Images},
booktitle={Proceedings of the 2nd International Conference on Information Systems Security and Privacy - ICISSP},
year={2016},
pages={255-264},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005652802550264},
isbn={978-989-758-167-0},
issn={2184-4356},
}

TY - CONF

JO - Proceedings of the 2nd International Conference on Information Systems Security and Privacy - ICISSP
TI - Streamlining Extraction and Analysis of Android RAM Images
SN - 978-989-758-167-0
IS - 2184-4356
AU - Broenner, S.
AU - Höfken, H.
AU - Schuba, M.
PY - 2016
SP - 255
EP - 264
DO - 10.5220/0005652802550264
PB - SciTePress