Research Article
ANTS ROAD: A New Tool for SQLite Data Recovery on Android Devices
@INPROCEEDINGS{10.1007/978-3-642-39891-9_16, author={Lamine Aouad and Tahar Kechadi and Roberto Russo}, title={ANTS ROAD: A New Tool for SQLite Data Recovery on Android Devices}, proceedings={Digital Forensics and Cyber Crime. 4th International Conference, ICDF2C 2012, Lafayette, IN, USA, October 25-26, 2012, Revised Selected Papers}, proceedings_a={ICDF2C}, year={2013}, month={10}, keywords={}, doi={10.1007/978-3-642-39891-9_16} }- Lamine Aouad
Tahar Kechadi
Roberto Russo
Year: 2013
ANTS ROAD: A New Tool for SQLite Data Recovery on Android Devices
ICDF2C
Springer
DOI: 10.1007/978-3-642-39891-9_16
Abstract
Recovering deleted information is one of the most important probative elements in a forensic investigation that involves a mobile phone. In this paper, we present a new tool implementing an innovative method, based on a low-level analysis, to recover deleted data from SQLite databases on Android devices, taking as an initial example text messages. The paper then proposes a generic framework for deleted data recovery that can be used with a range of SQLite databases on a variety of Android systems and devices. Indeed, although our initial aim was to recover deleted SMSs, we realized along the way that, with the appropriate changes, the initial implemented method can be applicable to the extraction of deleted information from any SQLite database file.
