Comparative Evaluation of Mobile Forensic Tools
Oluwafemi Osho, Sefiyat Oyiza Ohida · International Journal of Information Technology and Computer Science · 2016
Mobile technology, over the years, has improved tremendously in sophistication and functionality.Today, there are mobile phones, known as smartphones, that can perform virtually most functions associated with personal computers.This has translated to increase in the adoption of mobile technology.Consequently, there has been an increase in the number of attacks against and with the aid of this technology.Mobile phones will often contain data that are needed as evidence in a court of law.And, therefore, the need to be able to acquire and present this data in an admissible form cannot be overemphasized.This requires the right forensic tools.This is the focus of this study.We evaluated the ability of four forensic tools to extract data, with emphasis on deleted data, from Android phones.Our results show that AccessData FTK Imager and EnCase performed better than MOBILedit Forensic and Oxygen Forensic Suite at acquiring deleted data.The conclusion is that, finding a forensic tool or toolkit that is virtually applicable across all mobile device platforms and operating systems is currently infeasible.