Android设备取证研究  

Research on Android Device Forensic

作　　者：刘浩阳[1] 

机构地区：[1]大连市公安局,辽宁大连116011

出　　处：《信息网络安全》2015年第9期29-32,共4页Netinfo Security

摘　　要：使用Android操作系统的设备(简称Android设备)近年来发展迅速,其典型代表是手机和平板电脑。Android设备在方便人们办公和个人联系的同时,也为犯罪分子提供了便利。Android设备已经成为一种值得警惕的犯罪工具和对象。由于Android设备的运行机制不同于传统计算机设备,对于Android设备的取证给取证人员提出了新的挑战,成为目前取证工作中的一个难点。公安机关等执法部门急需有效的技术手段和方法来应对使用Android设备的犯罪活动。文章将阐述Android设备取证的基本常识,以及从这些设备上获取电子证据的工具和技术。In recent years, the device that using Android operating system （referred to as Android device） develops rapidly. Its typical representatives are mobile phone and tablet PC. While Android device provides the convenience to personal ofifce and personal contact, Android device also provides a convenience to criminal. Android device has become a kind of criminal tool and objects to be on guard. As the operating mechanism of Android device is different from the traditional computer equipment, Android device forensic has become a difficult job to Android device forensic personnel. Public security organs and other law enforcement agencies are badly in need of effective technical means and methods to deal with the crime using Android device. This article elaborates on the basic knowledge of Android device and the tools and techniques that obtain electronic evidences from these devices.

关 键 词：Android设备取证 电子数据取证 网络犯罪 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]