手机仿真取证系统浅析——Android系统仿真实战  

Research on Mobile Phone Emulation Forensic System-Practical Analysis of Android System Emulation

作　　者：黄志炜[1] 

机构地区：[1]厦门市美亚柏科信息股份有限公司,福建厦门361008

出　　处：《信息网络安全》2010年第11期19-20,共2页Netinfo Security

摘　　要：随着各种手机的推广,手机应用程序的极大丰富,在实际取证工作中,我们经常会遇到对各种手机的应用程序取证,而现有对手机应用程序的分析技术刚刚起步,要实现对大部分应用程序使用痕迹的取证需要一段较长的时间。如何快速对手机应用程序进行取证成为取证工作的一个重要。因此本文提出了一个手机仿真取证系统的解决方案,并以Android系统为例进行介绍。With the popularization of mobile handset and its rapid development, there are more and more application software which are applied in mobile phone systems. During the process of mobile forensics, we are often faced with evidence extraction of all kinds of applications in mobile phone system. However, forensic analysis of applications in mobile phones is still in its beginning stage. It need take longer time to be able to analyze,extract or acquire the artifacts of most application software. It is one key point for mobile forensic investigators to analyze applications in mobile phone systems to get evidence. This paper describes one solution for mobile phone forensics, that is, dynamic emluation of mobile phone system, which will introduce the investigation on Androit phone system based on this system.

关 键 词：手机 仿真 取证 使用痕迹 ANDROID 

分 类 号：TN929.53[电子电信—通信与信息系统] TP316[电子电信—信息与通信工程]