A Study on the Processing of Timestamps in the Creation of Multimedia Files on Mobile Devices
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Digital data can be manipulated easily, so information related to the timestamp is important in establishing thereliability of the data. The time values for a certain file can be extracted following the analysis of the filesystemmetadata or file internals, and the information can be utilized to organize a timeline for a digital investigation. Suppose the reversal of a timestamp is found on a mobile device during this process. In this case, a more detailed analysis is required due to the possibility of anti-forensic activity, but little previous research has investigated the handling and possible manipulation of timestamps on mobile devices. Therefore, in this study, we determine how time values for multimedia files are handled according to the operating system or filesystem on mobile devices. We also discuss five types of timestamps—file created (C), last modified (M), last accessed (A), digitalized (Di), and filename (FN) of multimedia files, and experimented with their operational features across multiple devices such as smartphones and cameras.
Abstract
Digital data can be manipulated easily, so information related to the timestamp is important in establishing thereliability of the data. The time values for a certain file can be extracted following the analysis of the filesystemmetadata or file internals, and the information can be utilized to organize a timeline for a digital investigation. Suppose the reversal of a timestamp is found on a mobile device during this process. In this case, a more detailed analysis is required due to the possibility of anti-forensic activity, but little previous research has investigated the handling and possible manipulation of timestamps on mobile devices. Therefore, in this study, we determine how time values for multimedia files are handled according to the operating system or filesystem on mobile devices. We also discuss five types of timestamps—file created (C), last modified (M), last accessed (A), digitalized (Di), and filename (FN) of multimedia files, and experimented with their operational features across multiple devices such as smartphones and cameras.
참고문헌 (21)
- S. Garfinkel, "Digital forensics XML and the DFXML toolset", Digital Investigation, 8(3-4), pp.161~174 (2012)
- C. Chen, "Mislgan: an anti-forensic camera model falsification framework using a generative adversarial network", Proceedings of 2018 25th IEEE International Conference on Image Processing (ICIP), pp.535~539 (2018)
- "Understanding EXT4 (Part 4): Demolition Derby" (2011)[URL]
- "Comparison of file systems" (2015)[URL]
- B. Carrier, "File System Forensic Analysis" (2005), Addison-Wesley
- David Palmbach, "Artifacts for Detecting Timestamp Manipulation in NTFS on Windows and Their Reliability", Forensic Science International: Digital Investigation, 32, pp.300920~ (2020), Elsevier BV[DOI]
- 임채규, "Survey of Temporal Information Extraction", JIPS(Journal of Information Processing Systems), 15(4), pp.931~956 (2019), 한국정보처리학회[DOI]
- "Date and time—Representations for information interchange—Part 1: Basic rules, ISO 8601-1:2019", ~ (2019)
- "MS-DOS Date and Time" (2021)[URL]
- "File times" (2021)[URL]
- "ExifTool version 12.14" (2022)[URL]
- "DCode version 5.2" (2022)[URL]
- J. O. Nelson, "Comparative analysis of iPhone image data across various transfer methods", Ph.D., pp.2020
- "Benefits of using multiple timestamps during timeline analysis in digital forensics" (2010)[URL]
- Capturing timestamp precision for digital forensics, "E. Antsilevich", James Madison University, ~, pp.Report No. JMU-INFOSEC-TR-2009-002 (2009)
- T. Gobel, "Anti-forensics in ext4 : on secrecy and usability of timestamp-based data hiding", Digital Investigation, 24, pp.S111~S120 (2018)
- "Filesystem timestamps: what makes them tick?" (2016)[URL]
- Ana Nieto, "Cybersecurity profiles based on human-centric IoT devices", Human-centric Computing and Information Sciences, 9(1) (2019), Springer Science and Business Media LLC[DOI]
- Mohammed A. Alqarni, "Identifying smartphone users based on how they interact with their phones", Human-centric Computing and Information Sciences, 10(1) (2020), Springer Science and Business Media LLC[DOI]
- Shamaila Hayat, "Text and phone calls: user behaviour and dual-channel communication prediction", Human-centric Computing and Information Sciences, 10(1) (2020), Springer Science and Business Media LLC[DOI]
- 정준호, "Design and Implementation of a Digital Evidence Management Model Based on Hyperledger Fabric", JIPS(Journal of Information Processing Systems), 16(4), pp.760~773 (2020), 한국정보처리학회[DOI]