[논문]Forensic analysis of Telegram Messenger on Android smartphones

Anglano, Cosimo; Canonico, Massimo; Guazzone, Marco

doi:10.1016/j.diin.2017.09.002

Forensic analysis of Telegram Messenger on Android smartphones

Digital investigation, v.23, 2017년, pp.31 - 49

Anglano, Cosimo (Corresponding author. viale T. Michel 11, 15121, Alessandria, Italy.) , Canonico, Massimo , Guazzone, Marco

Abstract ▼ AI-Helper

Abstract In this paper we present a methodology for the forensic analysis of the artifacts generated on Android smartphones by Telegram Messenger, the official client for the Telegram instant messaging platform, which provides various forms of secure individual and group communication, by means of which both textual and non-textual messages can be exchanged among users, as well as voice calls. Our methodology is based on the design of a set of experiments suitable to elicit the generation of artifacts and their retention on the device storage, and on the use of virtualized smartphones to ensure the generality of the results and the full repeatability of the experiments, so that our findings can be reproduced and validated by a third-party. In this paper we show that, by using the proposed methodology, we are able (a) to identify all the artifacts generated by Telegram Messenger, (b) to decode and interpret each one of them, and (c) to correlate them in order to infer various types of information that cannot be obtained by considering each one of them in isolation. As a result, in this paper we show how to reconstruct the list of contacts, the chronology and contents of the messages that have been exchanged by users, as well as the contents of files that have been sent or received. Furthermore, we show how to determine significant properties of the various chats, groups, and channels in which the user has been involved (e.g., the identifier of the creator, the date of creation, the date of joining, etc.). Finally, we show how to reconstruct the log of the voice calls made or received by the user. Although in this paper we focus on Telegram Messenger, our methodology can be applied to the forensic analysis of any application running on the Android platform.

주제어

참고문헌 (42)

J. Commun. Al Barghuthi 8 11 708 2013 Social networks IM forensics: encryption analysis
Digit. Investig. Anglano 11 3 201 2014 10.1016/j.diin.2014.04.003 Forensic analysis of WhatsApp messenger on Android smartphones

상세보기
Digit. Investig. Anglano 19 44 2016 10.1016/j.diin.2016.10.001 Forensic analysis of the ChatSecure instant messaging application on Android smartphones

상세보기
Anglano 2017 Configuration and Use of Android Virtual Devices for the Forensic Analysis of Android Applications
J. Forensic Sci. Azfar 61 5 2016 10.1111/1556-4029.13164 An Android communication app forensic taxonomy

상세보기
Budd 2016 Following the Mark: Hackers Begin to Leverage Telegram Messaging App
Cellebrite LTD 2015 UFED Mobile Forensics Applications
Cellebrite LTD 2015 UFED4PC: the Software-based Mobile Forensics Solution
Compelson Labs 2017 Mobiledit Forensic Express
DrKLO 2017 Telegram Messenger for Android
504ENSICS Labs 2016 Linux Memory Extractor (Lime)
Epifani 2015 Learning iOS Forensics
Google 2016 Android Device Monitor
Google 2016 Run Apps on the Android Emulator
Digit. Investig. Gregorio 22 88 2017 10.1016/j.diin.2017.07.004 Forensic analysis of telegram messenger for windows phone

상세보기
Husain 2010 Digital Forensics and Cyber Crime. Vol. 31 of Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering iForensics: forensic analysis of instant messaging on smart phones
Personal Ubiquotous Comput. Jeon 16 6 707 2012 10.1007/s00779-011-0428-7 A recovery method of deleted records for SQLite database

상세보기
McLoughlin 2008 The QCOW2 Image Format
Mehrotra 1 2013 2013 IEEE International Conference on Computational Intelligence and Computing Research Forensic analysis of Wickr application on Android devices
Micro Systemation 2016 XRY
Microsoft Corp 2017 Windows Phone Emulator for Windows Phone 8
Digit. Investig. Ovens 17 2016 10.1016/j.diin.2016.04.001 Forensic analysis of Kik messenger on iOS devices

상세보기
Oxygen Forensics, Inc 2013 Oxygen Forensics
Oxygen Forensics, Inc 2013 SQLite Viewer
Satrya 1 2016 2016 International Conference on Information Communication Technology and Systems (ICTS) Digital forensic analysis of Telegram Messenger on Android devices
Satrya 430 2016 2016 Eighth International Conference on Ubiquitous and Future Networks (ICUFN) Android forensics analysis: private chat on social messenger
Susanka 2017 Security Analysis of the Telegram IM
Tamma 2015 Learning Android Forensics
Telegram Messenger LLP 2016 100,000,000 Monthly Active Users
Telegram Messenger LLP 2017 Binary Data Serialization
Telegram Messenger LLP 2017 TL Language
Telegram Messenger LLP 2017 TL Schema
Telegram Messengers LLP 2017 Telegram Applications
2017 Android Developers Never Sleep
Tso 1 2012 Proc. of the 6th International Conference on Ubiquitous Information Management and Communication. ICUIMC'12 iPhone social networking for evidence investigations using iTunes forensics
United Nations Office on Drugs and Crime 2013 Comprehensive Study on Cybercrime
Volatility Foundation 2016 An Advanced Memory Forensics Framework
Digit. Investig. Walnycky 14 Suppl. 1 S77 2015 10.1016/j.diin.2015.05.009 Network and device forensic analysis of Android social-messaging applications

상세보기
Warrick 2016 The App of Choice for Jihadists: ISIS Seizes on Internet Tool to Promote Terror
Digit. Investig. Wu 21 3 2017 10.1016/j.diin.2016.11.002 Forensic analysis of WeChat on Android smartphones

상세보기
Zhang 500 2016 2016 Sixth International Conference on Instrumentation Measurement, Computer, Communication and Control (IMCCC) The forensic analysis of WeChat message
Zhou 7151 2015 2015 IEEE International Conference on Communications (ICC) Dump and analysis of Android volatile memory on Wechat

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관 관리번호, 논문명, 대등논문명, 저자 , 저널/프로시딩명, 발행기관, 발행년, 발행언어, 권, 호, 시작페이지, 끝페이지, ISBN, ISSN, 주제분야, 키워드, 초록(한글), 초록(영문), 저자(소속기관)
저장형식	Text(ASCII format) Excel format RefWorks Direct Export RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증

Forensic analysis of Telegram Messenger on Android smartphones

Abstract ▼ AI-Helper

주제어

참고문헌 (42)

이 논문을 인용한 문헌

관련 콘텐츠

원문 URL 링크

이 논문과 함께 이용한 콘텐츠

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트