Digital Forensics and Cyber Crime. 4th International Conference, ICDF2C 2012, Lafayette, IN, USA, October 25-26, 2012, Revised Selected Papers

Research Article

ANTS ROAD: A New Tool for SQLite Data Recovery on Android Devices

Download
814 downloads
  • @INPROCEEDINGS{10.1007/978-3-642-39891-9_16,
        author={Lamine Aouad and Tahar Kechadi and Roberto Russo},
        title={ANTS ROAD: A New Tool for SQLite Data Recovery on Android Devices},
        proceedings={Digital Forensics and Cyber Crime. 4th International Conference, ICDF2C 2012, Lafayette, IN, USA, October 25-26, 2012, Revised Selected Papers},
        proceedings_a={ICDF2C},
        year={2013},
        month={10},
        keywords={},
        doi={10.1007/978-3-642-39891-9_16}
    }
    
  • Lamine Aouad
    Tahar Kechadi
    Roberto Russo
    Year: 2013
    ANTS ROAD: A New Tool for SQLite Data Recovery on Android Devices
    ICDF2C
    Springer
    DOI: 10.1007/978-3-642-39891-9_16
Lamine Aouad1,*, Tahar Kechadi1,*, Roberto Russo1
  • 1: University College Dublin
*Contact email: lamine.aouad@ucd.ie, tahar.kechadi@ucd.ie

Abstract

Recovering deleted information is one of the most important probative elements in a forensic investigation that involves a mobile phone. In this paper, we present a new tool implementing an innovative method, based on a low-level analysis, to recover deleted data from SQLite databases on Android devices, taking as an initial example text messages. The paper then proposes a generic framework for deleted data recovery that can be used with a range of SQLite databases on a variety of Android systems and devices. Indeed, although our initial aim was to recover deleted SMSs, we realized along the way that, with the appropriate changes, the initial implemented method can be applicable to the extraction of deleted information from any SQLite database file.