TY - JOUR
T1 - Visible Forensic Investigation for Android Applications by Using Attack Scenario Reconstruction
AU - Song, Shiwen
AU - Liu, Xuanyu
AU - Fu, Xiao
AU - Luo, Bin
AU - Du, Xiaojiang
AU - Guizani, Mohsen
N1 - Publisher Copyright:
© 2021 IEEE.
PY - 2021
Y1 - 2021
N2 - With the widespread use of Android devices, research on their security has attracted increasing attention. However, at present, digital forensics for investigating attacks, such as social engineering attacks and phishing that target Android users, remains a challenging and time-consuming task. To help discover the existence of an attack and conduct effective investigations, we propose a top-down digital forensic tool for Android applications to reconstruct attack scenarios by considering both high-level user interface (UI) elements and low-level system events. Thus, we can explain the nature of an attack from a visual and global perspective. The tested evaluation results show that our tool can successfully reconstruct scenarios on Android devices for phishing attacks.
AB - With the widespread use of Android devices, research on their security has attracted increasing attention. However, at present, digital forensics for investigating attacks, such as social engineering attacks and phishing that target Android users, remains a challenging and time-consuming task. To help discover the existence of an attack and conduct effective investigations, we propose a top-down digital forensic tool for Android applications to reconstruct attack scenarios by considering both high-level user interface (UI) elements and low-level system events. Thus, we can explain the nature of an attack from a visual and global perspective. The tested evaluation results show that our tool can successfully reconstruct scenarios on Android devices for phishing attacks.
KW - Android forensics
KW - attack investigation
KW - phishing
KW - scenario reconstruction
UR - http://www.scopus.com/inward/record.url?scp=85184647592&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85184647592&partnerID=8YFLogxK
U2 - 10.1109/GLOBECOM46510.2021.9685748
DO - 10.1109/GLOBECOM46510.2021.9685748
M3 - Conference article
AN - SCOPUS:85184647592
SN - 2334-0983
JO - Proceedings - IEEE Global Communications Conference, GLOBECOM
JF - Proceedings - IEEE Global Communications Conference, GLOBECOM
T2 - 2021 IEEE Global Communications Conference, GLOBECOM 2021
Y2 - 7 December 2021 through 11 December 2021
ER -