Key Technologies of Phone Storage Forensics Based on ARM Architecture

2017 International Symposium on Application of Materials Science and Energy Materials

材料科学;能源学

Zhang, Jianghan^1 ; Che, Shengbing^1

School of Central, South University of Forestry and Technology, Hunan Changsha

410004, China^1

关键词: Android smart phones;    ARM architecture;    Complete solutions;    Conversion mechanism;    Key technologies;    Memory address mapping;    Mobile platform;    Viable solutions;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/322/5/052008/pdf
DOI  :  10.1088/1757-899X/322/5/052008

学科分类：材料科学（综合）

来源: IOP

【 摘 要 】

Smart phones are mainly running Android, IOS and Windows Phone three mobile platform operating systems. The android smart phone has the best market shares and its processor chips are almost ARM software architecture. The chips memory address mapping mechanism of ARM software architecture is different with x86 software architecture. To forensics to android mart phone, we need to understand three key technologies: memory data acquisition, the conversion mechanism from virtual address to the physical address, and find the system's key data. This article presents a viable solution which does not rely on the operating system API for a complete solution to these three issues.