Android系统地理位置信息取证研究  

Research on Geographic Information Forensics of Android System

作　　者：许学添[1] 黄少荣[1] 

机构地区：[1]广东司法警官职业学院信息管理系,广东广州510520

出　　处：《网络空间安全》2017年第6期59-63,共5页Cyberspace Security

摘　　要：在智能手机已经完全融入人们日常生活的今天,智能手机上大量的用户行为信息是办案人员重要的线索来源,也是犯罪行为的有力证据。文章主要研究Android系统的地理位置取证,通过逻辑取证取得保存在Android系统中不同应用程序上的地理位置信息;另外,提出了一种网络数据包取证的方式,并验证了在应用程序发出包含地理位置信息的服务请求时可以成功取证到地理位置信息,为Android系统的地理位置取证提供了另一种思路和模式。The smart phone has been fully integrated into people＇s daily lives today. There is a large number of user behavior information on the smart phones which is an important clues, but also a strong evidence of criminal behavior. This paper mainly studies the location forensics of Android system. We preserved the location information of different App in the Android system by logical acquisition.In addition, we put forward a way of geographic location forensics by network data packets, and verify the geographic information can be successfully acquisited when the App send request with geographic location information. This provides another idea and model for the location forensics of Android system.

关 键 词：ANDROID系统 地理位置信息 取证 

分 类 号：TP278[自动化与计算机技术—检测技术与自动化装置]