Estado del arte de las técnicas digitales forenses para dispositivos Android

Abstract

Nowadays, both computers and other digital devices have become ubiquitous in our society. Both companies and individuals use computers in their day to day, whether for leisure or work. In addition, currently, everyone has a smartphone with internet connection, which we carry all day. Smartphones have been a technological leap. We can use them to communicate with friends and acquaintances, check the status of our bank account, work or even pay the supermarket bill. What is known as digital forensics aims to solve two problems of this technological world. In one hand, hundreds of attacks occur every day on mobile devices and computers. It is essential to be able to determine what have been the causes of an attack, vectors of entry and consequences to have the capacity of protect us in future attacks. Furthermore, most of them are typified crimes and, for this reason, it is very important to be capable to retrieve the different data of the devices in search of evidences that can be presented in a possible judicial process. On the other hand, both companies and individuals use the technological devices to perform different functions. Problems such as data loss are inevitable. Forensic analysis pretends to give the ability to recover important information of our devices to analyse later. In this way, companies can analyse possible malpractice of their employees and, as much companies as individuals, has the capacity to recover data that, apparently, had been lost. In this project, it is intended to make known what is a digital forensics analysis and what considerations we must take into account when performing such analysis. Legal issues related to digital forensics will also be discussed. Once the general process is known, the project will be oriented to the investigation and study of different techniques and tools to carry out digital forensics in Android devices. Therefore, we will study how to perform an analysis for an Android terminal.