摘要
Android是目前移动终端和智能设备中使用最广泛的操作系统之一，市场份额接近60％。Android设备通常记录有文字信息、电子邮件、GPS信息、照片、视频等大量数据，是移动终端取证的重要组成部分。在研究Android操作系统特性和结合现有的提取Android设备数据技术手段的基础上，对Android系统中数据提取技术进行了创新性改造，提出并设计了一种基于MPE系统提取Android设备数据的方法，对提升移动终端取证具有重要意义。
Android now occupies approximately 60% market share and is one of the most popular operating systems used on the market. Like all mobile devices, various data like texts, emails, GPS info, images and videos are stored on Android devices, which means that acquiring data from it is quite crucial for digital forensics. To make the process more effective, an innovative method, data acquisition based on MPE, was proposed based on study of Android operating system. And this has a significant effect on digital forensics.
作者
梁效宁
黄旭
朱星海
LIANG Xiao-ning HUANG Xu ZHU Xing-hai(Sichuan Provinee Key Laboratory of Data Recovery, Chengdu 610000, China)
出处
《计算机科学》
CSCD
北大核心
2016年第B12期57-60,共4页
Computer Science
