Forensic Analysis of Third-Party Cloud Software Development Kits for Android Apps

Forensic Analysis of Third-Party Cloud Software Development Kits for Android Apps

연구 분야: Verification

학회: IFIP International Conference on Digital Forensics

Android software development kits for cloud storage are commonly adopted by the app development community and countless apps from productivity tools to media-sharing platforms currently incorporate the kits. The popularity can be attributed to their ability to offer scalable and reliable cloud storage apps, reducing the need for on-device storage and ensuring data accessibility across devices. However, because the apps tend to store user information in the cloud, there are concerns about security risks and sensitive information leakage. This chapter presents the results of a forensic analysis of 11 major Android cloud software development kits and 120 real-world apps that leverage the kits for data storage. The analysis revealed that 103 apps store user account information, including name, email, date of birth and profile picture, 77 apps access and store user media files and user preferences and settings in the cloud, and 12 apps track the last used times of other installed apps. Android software development kits for cloud storage are of great value in mobile device forensics because they support the extraction of diverse and novel types of evidence, including via uniform resource locators.