Forenzička analiza SQLite baze podataka Android uređaja

master's thesis

• Title (english): SQLite Database Forensic Analysis of an Android Device
• Author: Marko Soldo
• Mentor: Siniša Husnjak (mentor)
• Committee member: Dragan Peraković (predsjednik povjerenstva)
• Committee member: Ivan Cvitić (član povjerenstva)
• Committee member: Marko Periša (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2020-09-24, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Pametni mobilni telefoni danas čine osnovu mnogih ljudskih djelatnosti i aktivnosti. Posljedica toga je kreiranje velike količine podataka. Podaci su često privatne prirode te sadrže osjetljive korisničke informacije. Zbog toga je vrijednost podataka danas veća nego ikad prije. Takav trend pogoduje razvoju digitalne forenzičke analize kao posebne grane forenzičke znanosti. Često su podaci dobiveni metodama forenzičke analize neprocjenjiv izvor dokaza u postupcima kaznenih istraga. U diplomskom radu je obavljen postupak ekstrakcije podataka Android pametnog mobilnog telefona. Također, postupak je povezan s internom SQLite bazom podataka u fazi analize. Teorijsku podlogu čini opis interne arhitekture SQLite baze podataka. Osim toga, navedeni su postupci i metodologije procesa forenzičke analize. Cilj diplomskog rada je dobivanje uvida u osnovne mogućnosti Andriller i Autopsy forenzičkih alata te SQLite baze podataka na primjeru prosječnog korisnika.

Abstract (english)

Smartphones today make the basis of many human activities. The consequence is the creation of a large amount of data. The data is often private in nature and contains sensitive user information. As a result, the value of data is higher today than ever before. Such a trend favors the development of digital forensic analysis as a special branch of forensic science. Often, data obtained by forensic analysis methods are an invaluable source of evidence in criminal investigation proceedings. In this graduate thesis, the data extraction procedure of an Android smartphone was performed. Also, the process is linked to the internal SQLite database in the analysis phase. The theoretical basis is a description of the internal architecture of the SQLite database. In addition, the procedures and methodologies of the forensic analysis process are listed. The aim of the graduate thesis is to gain insight into the basic capabilities of Andriller and Autopsy forensic tools and SQLite database on the example of the average user.

• Keywords: baza podataka; SQLite; forenzička analiza; Android; Andriller; Autopsy
• Keywords (english): database; SQLite; forensic analysis; Android; Andriller; Autopsy
• Language: croatian
• URN:NBN: urn:nbn:hr:119:348517
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Road Traffic and Transport; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2020-10-16 13:33:05