Submit your papersSubmit Now
For Enquiries: [email protected]
IIARD LogoIIARD

Mobile Forensics for Information Security Management

Okpara Emmanuel Ihemelandu, Prof Igbe C M, Mrs Olebara C C PhD

Abstract

The proliferation of mobile devices has significantly transformed modern communication, business operations, and data storage practices. With smartphones and tablets now integral to both personal and enterprise environments, these devices have become central repositories of sensitive data and communication records. However, this technological advancement has also introduced complex security challenges, as mobile platforms are increasingly targeted by cybercriminals through malware, phishing attacks, unauthorized access, and data breaches. Mobile forensics, a specialized branch of digital forensics, has emerged as a vital tool in information security management. It focuses on the systematic extraction, preservation, analysis, and presentation of data from mobile devices in a manner that is legally admissible and forensically sound. This process plays a dual role in both the investigation of incidents and the prevention of future threats. This paper explores the growing significance of mobile forensics within the context of information security. It examines core forensic methodologies, common sources of evidence (such as SMS, instant messaging, GPS data, and application logs), and widely used forensic tools, including Cellebrite UFED and Magnet AXIOM. In addition, it addresses key challenges such as encryption, anti-forensic techniques, and rapid software evolution. The paper also discusses the legal and ethical considerations relevant to data privacy and compliance with regulations like the General Data Protection Regulation (GDPR) and the Nigerian Data Protection Regulation (NDPR). Finally, the paper presents real-world applications of mobile forensics in cybersecurity, law enforcement, compliance audits, and organizational incident response, affirming its critical role in modern digital risk management.

Keywords

CybersecurityMobile NetworkMobile ForensicsInformation SecurityData

References

Al-Dhaqm, A., Razak, S. A., Al-Dhaqm, T. S., & Jebur, H. H. (2020). Challenges and Issues in Mobile Forensics. Journal of Theoretical and Applied Information Technology, 98(5), 807–821. Ayers, D. (2009). A second look at forensic readiness. Network Security, 2009(6), 12–14. https://doi.org/10.1016/S1353-4858(09)70059-0 Ayers, R., Brothers, S., & Jansen, W. (2014). Guidelines on Mobile Device Forensics (NIST SP 800-101 Rev.1). NIST. Casey, E. (2011). Digital Evidence and Computer Crime: Forensic Science, Computers, and the Internet (3rd ed.). Academic Press. Cellebrite. (2021). UFED Physical Analyzer. https://www.cellebrite.com Cellebrite. (2023). Mobile Forensics Solutions. Chernyshev, M., Zeadally, S., Baig, Z. and Woodward, A. (2017) ‘Mobile forensics: advances, challenges, and research opportunities’, in IEEE Security & Privacy, November/December, Vol. 15, No. 6, pp.42–51. Choo, K.K. R. (2011). The cyber threat landscape: Challenges and future research directions. Computers & Security, 30(8), 719–731. https://doi.org/10.1016/j.cose.2011.08.004 Colvin, B., Iqbal, F., & Thorpe, S. (2016). BYOD and the Mobile Forensic Process. Digital Investigation, 16, S70–S78. https://doi.org/10.1016/j.diin.2016.01.013 European Union. (2016). General Data Protection Regulation (GDPR). Official Journal of the European Union. Faheem, M., Javed, M. A., Abbas, A., & Hassan, S. U. (2022). Mobile instant messaging forensics: Analysis and challenges. Forensic Science International: Digital Investigation, 40, https://doi.org/10.1016/j.fsidi.2022.301353 Fukami, A. and Nishimura, K. (2019) ‘Forensic analysis of water damaged mobile devices’, Digital Investigation, Vol. 29, No. Supplement, pp.S71–S79, ISSN: 1742-2876. Grispos, G., Glisson, W. B., & Storer, T. (2012). A comparison of forensic evidence recovery techniques for Android devices. Digital Investigation, 9, S18–S28. Hossain, M. S., Fotouhi, M., & Hasan, R. (2019). Towards an analysis of security issues, challenges, and open problems in the Internet of Things. Journal of Network and Computer Applications, 143, 98–117. https://doi.org/10.1016/j.jnca.2019.06.014 Jansen, W., & Ayers, R. (2007). Guidelines on cell phone forensics (NIST Special Publication 800-101). National Institute of Standards and Technology. Jones, A., & Valli, C. (2009). Building a Digital Forensic Laboratory. Syngress Publishing. Kerr, O. S. (2010). The Fourth Amendment and the Global Internet. Stanford Law Review, 62(5), 1009–1055. Magnet Forensics. (2021). Magnet AXIOM User Guide. https://www.magnetforensics.com Martini, B., & Choo, K.-K. R. (2012). Cloud storage forensics: OwnCloud as a case study. Digital Investigation, 10(4), 287–299. Nigeria Data Protection Bureau (NDPB). (2019). Nigerian Data Protection Regulation (NDPR). NIST. (2014). SP 800-101 Rev.1: Guidelines on Mobile Device Forensics. National Institute of Standards and Technology. Ovens, M., & Morison, G. (2016). Mobile device forensics: A guide for law enforcement. Digital Investigation, 17, 73–84. Quick, D., & Choo, K.-K. R. (2014). Digital droplets: Microsoft SkyDrive forensic data remnants. Future Generation Computer Systems, 29(6), 1378–1394. Quick, D., & Choo, K.-K. R. (2014). Smartphone cloud storage forensics: A preliminary analysis. Digital Investigation, 10(1), 3–18. Ruan, K., Carthy, J., Kechadi, M. T., & Crosbie, M. (2011). Cloud forensics: An overview. In IFIP International Conference on Digital Forensics (pp. 35–46). Springer. Ruan, K., Carthy, J., Kechadi, M. T., & Crosbie, M. (2013). Cloud forensics definitions and critical criteria for cloud forensic capability: An overview of survey results. Digital Investigation, 10(1), 34–43. Sgaras, C., Slay, J., & Turnbull, B. (2021). Machine learning and digital forensics: An overview of current applications and future directions. Computers & Security, 106, 102286. https://doi.org/10.1016/j.cose.2021.102286 Sharma, A., & Kalita, H. K. (2020). Mobile Forensics: Advancements and Future Directions. Journal of Information Security. Zhao, Y., Yue, C., & Wang, H. (2016). A survey on anti-forensics techniques. Journal of Computer Research and Development, 53(5), 961–976.

More Articles from INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND MATHEMATICAL THEORY

Advances in Algorithmic Contract Scoring for Pre-Negotiation Yield Optimization and Risk Retention

Author: Ngozi Samuel Uzougbo, Michael Ominyi, Cyril Chimelie Anichukwueze, Blessing, Chika Jones

DevTest flow: Designing a Scalable Continuous Testing Pipeline for High-Velocity Software Delivery

Author: Lawal Ahmed Oladimeji, Achori Busayo, Akeju BusayoZainab, Saka Samson, Damilare, Mbah Demian Chidi, Runsewe Similoluwa Mayowa, Oladiti Luqman, Abiodun