User behavior analysis method and system for android digital forensics

Abstract

The invention provides an Android digital forensics-oriented user behavior analysis method. The method comprises the following steps: S1, acquiring Android forensics data; S2, determining a forensics identification event according to a digital forensics rule and the forensics identification requirement; S3, performing correlation analysis on the forensics identification event and a digital forensics identification method, and determining the digital forensic identification method; S4, analyzing the Android forensics data by using the digital forensic identification method, and obtaining a digital forensic identification event analysis result; S5, performing correlation analysis on the digital forensic identification event analysis result and a user behavior, and obtaining a correlation analysis result; S6, performing forensics analysis on the user behavior according to the correlation analysis result by using a data mining method, and obtaining an Android digital forensic user behavior analysis result; and S7, showing the Android digital forensic user behavior analysis result. According to the method, the Android digital forensic user behavior analysis result is realized.

Description

technical field [0001] The invention relates to the technical field of digital forensics, in particular to a user behavior analysis method and system for Android digital forensics. Background technique [0002] Android digital forensics refers to the process in which forensic personnel extract, transmit, save, analyze and submit electronic evidence existing in Android mobile terminals or other electronic devices in accordance with legal norms. When forensics personnel use digital forensics tools to forensics Android devices, they can reason and analyze the case based on the analysis results of the data in the device by the forensics tools, and finally get a forensics report generated by the forensics tools. Since the purpose of digital forensics is to collect and discover evidence from related electronic devices such as mobile electronic devices, two key technologies are involved: data acquisition technology and data analysis technology. [0003] In the actual criminal inve...

AI Technical Summary

Problems solved by technology

This makes the work of user behavior analysis in the process of digital forensics cumbersome, and forensic personnel have to spend a lot of energy to analyze the forensic data, and because of the subjectivity of human factors, the credibility and reliability of the forensic analysis conclusions are reduced. objectivity

Images