Forensic analysis of note and journal applications. (March 2022)

• Record Type: Journal Article
• Authors: Shin, Sumin; Kim, Giyoon; Kim, Soram; Kim, Jongsung
• Is Part Of: Forensic science international. Volume 40(2022)
• Publication Date: 2022-03
• Subjects: Digital forensic -- Note and journal apps -- Security features
• DOI: 10.1016/j.fsidi.2022.301355
• Languages: English
• ISSNs: 2666-2817

Abstract

Abstract: As the rate of smartphones into the general population has increased, apps that provide a wide range of functions have been developed. The usage records can remain within the app, and are a significant target for analysis from a digital forensic perspective. However, some apps protect app data by providing security features. From the perspective of digital forensic investigation, there is a need for research into apps that provide security features, so that investigators can efficiently collect forensically useful data. In this study, we analyzed the secret values used for locking, and the methods for storing user-created content of 56 note and journal apps that provide security features within the app. We found that 95% of apps that provide security features store users' data insecurely. We propose methods of acquiring a password from another app, using the user's secret value that can be obtained within the app. Highlights: Identifing the security settings provided by each app. Identifing the user secret value used for security settings, and the storage location and storage type of the content. Analyzing vulnerabilities of note and journal apps. Providing decryption methods for encrypted app data.