In this paper, we investigate and evaluate through experimental analysis the possibility of
recovering authentication credentials of mobile applications from the volatile memory of …

There is a growing need for post-mortem analysis in forensics investigations involving
mobile devices, particularly when application-specific behaviors must be analyzed. This is …

As recently shown in 2013, Android-driven smartphones and tablet PCs are vulnerable to so-
called cold boot attacks. With physical access to an Android device, forensic memory dumps …

Major advances in memory forensics in the past decade now allow investigators to efficiently
detect and analyze many types of sophisticated kernel-level malware. With operating …

More and more people rely on smartphones to manage their personal data. For many, it has
become a constant companion for a variety of tasks, such as making calls, surfing the web …

With the popularity of smartphones, various types of mobile crimes emerge endlessly.
Evidence from mobile phones is mostly obtained by non-volatile physical memory dump and …

Mobile phone forensics have become more prominent since mobile phones have become
ubiquitous both for personal and business practice. Android smartphones show tremendous …

Memory analysis is slowly moving up the software stack. Early analysis efforts focused on
core OS structures and services. As this field evolves, more information becomes accessible …

Over the last decade, userland memory forensics techniques and algorithms have gained
popularity among practitioners, as they have proven to be useful in real forensics and …

Applications that manage sensitive secrets, including cryptographic keys, are typically
engineered to overwrite the secrets in memory once they're no longer necessary, offering an …