The open source nature of the platform has not only established a new direction for the industry, but enables a developer or forensic analyst to understand the device at the most fundamental level. "Android Forensics" covers an open source mobile device platform based on the Linux 2.6 kernel and managed by the Open Handset Alliance. The Android platform is a major source of digital forensic investigation and analysis. This book provides a thorough review of the Android platform including supported hardware devices, the structure of the Android development project and implementation of core services (wireless communication, data storage and other low-level functions). Finally, it will focus on teaching readers how to apply actual forensic techniques to recover data. Ability to forensically acquire Android devices using the techniques is outlined in the book. It contains detailed information about Android applications needed for forensics investigations. It includes important information about SQLite, a file based structured data storage relevant for both Android and many other platforms.
Android Forensics
und über 1,5 Millionen weitere Bücher verfügbar für Amazon Kindle. Erfahren Sie mehr
| |||||||||||||||
Entdecken Sie Fachliteratur im neuen Shop Elsevier Computing. |
Kurzbeschreibung
Wird oft zusammen gekauft
Produktinformation
|
Mehr über den Autor
Entdecken Sie Bücher, lesen Sie über Autoren und mehr
Produktbeschreibungen
Pressestimmen
"If you want to truly understand and perform forensics on Android this is the book. There is no other reference that goes to this level of detail on the Android operating systems idiosyncrasies and quirks. Android Forensics is a must have for the mobile device examiner's bookshelf."-Jim Steele, Director of Digital Forensics , a Tier 1 Wireless Carrier "Andrew Hoog in his latest book, Android Forensics, provides exceptionally well written coverage of Android for the Computer Forensics Investigator. No small task given the ever changing nature of Google's preeminent mobile operating system."--Matthew M. Shannon, Principal, F-Response ".provides an excellent and comprehensive coverage of the Android platform, including its design, implementation, operation, investigation and analysis. At 364 pages of content, organized over seven chapters, with a focus on the 'practical' - demonstrating system design, implementation, operation and investigation, for instance, through hands-on "experiments" - this sizable text will resonate particularly well with readers disposed to activity-centric, learning-by-doing styled narrative. The text is peppered throughout with device and application (GUI) screenshots, as well as command line execution/output and directory listings."--InfosecReviews.com "In conclusion, we feel that Android Forensics is a good introduction to a field that still seems very 'fresh' and new to forensic examiners. As a quick reference during forensic analysis, the last chapter proves to be an excellent resource."--Computer and Security "At 364 pages of content, organized?over seven chapters, with a focus on?the 'practical' - demonstrating system design, implementation, operation and investigation, for instance, through hands- on "experiments" - this sizable text will resonate particularly well with readers disposed to activity-centric, learning-by- doing styled narrative.With a practical focus from the outset that includes how to acquire and install the Android SDK and build an Android Virtual Device (AVD), this text is particularly suited to those disposed to?a hands-on approach to learning about the Android platform from a security and investigation perspective."--Best Digital Forensics Book in InfoSecReviews Book Awards
Über den Autor
Andrew Hoog is a computer scientist, certified forensic analyst (GCFA and CCE), computer and mobile forensics researcher, former adjunct professor (assembly language) and owner of viaForensics, an innovative computer and mobile forensic firm. He divides his energies between investigations, research and training about the computer and mobile forensic discipline. He writes computer/mobile forensic how-to guides, is interviewed on radio programs and lectures and trains both corporations and law enforcement agencies. As the foremost expert in Android Forensics, he leads expert level training courses, speaks frequently at conferences and is writing a book on Android forensics.
Welche anderen Artikel kaufen Kunden, nachdem sie diesen Artikel angesehen haben?
In diesem Buch
(Mehr dazu)
Ausgewählte Seiten ansehen
Buchdeckel | Copyright | Inhaltsverzeichnis | Auszug | Stichwortverzeichnis
Buchdeckel | Copyright | Inhaltsverzeichnis | Auszug | Stichwortverzeichnis
Kundenrezensionen
Die hilfreichsten Kundenrezensionen
1 von 2 Kunden fanden die folgende Rezension hilfreich
Von M. Buhr
Format:Kindle Edition|Von Amazon bestätigter Kauf
Das Buch erklärt ausführlich die Möglichkeiten der forensischen Auswertung von Geräten, die auf dem Android-Betriebssystem basieren. Von einem Kauf der Kindle-Ausgabe ist unbedingt abzuraten. Leider sind sämtliche Schemata sowie die Codebeispiele absolut unlesbar. Das Nachvollziehen und Ausprobieren dieser Codebeispiele ist deshalb nicht bzw. sehr schwer möglich. Aufgrund dessen auch nur zwei Sterne. Das Buch an sich hätte mehr verdient. Lieber das "altmodische" Buch kaufen!
Die hilfreichsten Kundenrezensionen auf Amazon.com (beta)
Amazon.com:
4.1 von 5 Sternen
7 Rezensionen
9 von 9 Kunden fanden die folgende Rezension hilfreich
5.0 von 5 Sternen
Android Forensics Review
5. Juli 2011
Von RestrictedBytes
- Veröffentlicht auf Amazon.com
Format:Taschenbuch
As Brian Carrier is to file system forensics and Harlan Carvey is to Windows registry analysis, Andrew Hoog is to the Android operating system. The level of detail in this book demonstrates a deep understanding of this complex and unique operating system. Chapter 1 begins with an overview of both Android and Linux in general. Instructions are provided for creating a virtual machine environment so the reader can follow along with the examples in the book. Throughout, the reader is encouraged to follow along, and ample opportunities are provided. This is highly appreciated as most technical books overwhelm the reader with information rather than guide them along the way. Chapter 2 presents an overview of the hardware that is supported by the Android OS. Chapter 3 begins the discussion of the Android OS proper. Included in this chapter are instructions on augmenting the previously created VM with the Android SDK providing additional tools for use in analysis. Chapter 4 is devoted to discussing the file systems likely to be encountered in the Android environment. Special attention is paid to YAFFS and YAFFS2. Chapter 5 discusses securing the data within the device. Also presented are recommendations for securely using Android devices in an enterprise environment. Additional advice is given for both users and developers to limit the exposure of sensitive data. Chapter 6 covers the most significant portion of the book with instructions on acquiring the data from device. Logical and physical acquisitions from the handset as well as the removable storage are discussed. The issue of passcode circumvention is discussed along with potential solutions. Chapter 7 finishes with timeline analysis techniques for the YAFFS file system and the FAT file system. Additional locations of interest to both security researchers and forensic analysts are also presented. Overall the book is enjoyable to read and will be a valuable asset for both forensic analysts and researchers.
3 von 4 Kunden fanden die folgende Rezension hilfreich
4.0 von 5 Sternen
Kindle version is device dependent for readability
13. Januar 2013
Von DR
- Veröffentlicht auf Amazon.com
Format:Kindle Edition|Von Amazon bestätigter Kauf
One reviewer commented that code samples are unreadable for the Kindle version. That seems to be true for standard, small screen, non-color devices (i.e. classic Kindles). However, on my iPad Kindle app the code samples are fine. In fact you can unpinch them to zoom in, and rotate your device to portrait mode if needed. Also, the online Kindle Cloud Reader shows the code samples clearly. Hopefully future conversions of technical texts such as this one will be done with more care to allow resizing of special text. For now you will need your PC with the free Cloud Reader, or some large screen tablet device to take advantage of this ebook.
4 von 6 Kunden fanden die folgende Rezension hilfreich
5.0 von 5 Sternen
Android Forensics book review
12. Juli 2011
Von gscardwe
- Veröffentlicht auf Amazon.com
Format:Taschenbuch|Von Amazon bestätigter Kauf
Andrew Hoog has done an outstanding job presenting a complex topic that should interest not only advanced forensic practitioners but the typical Android Smartphone user as well. Highly recommended, whether its for work, or you want to know what "rooting" your Android phone actually does to the device.
›
Gehen Sie zu Amazon.com, um alle 7 Rezensionen zu sehen
4.1 von 5 Sternen
Waren diese Rezensionen hilfreich?
Wir wollen von Ihnen hören.
Kunden diskutieren
|
Das Forum zu diesem Produkt
Fragen stellen, Meinungen austauschen, Einblicke gewinnen Aktive Diskussionen in ähnlichen Foren
Kundendiskussionen durchsuchen
|
Ähnliche Foren
|
||||||||||||||||||||||||||||||||||
Lieblingslisten
Ähnliche Artikel finden
Ihr Kommentar
Möchten Sie die Produktinformationen aktualisieren oder Feedback zu den Produktabbildungen geben?
|
