{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T23:03:11Z","timestamp":1743030191814,"version":"3.40.3"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030114060"},{"type":"electronic","value":"9783030114077"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-11407-7_7","type":"book-chapter","created":{"date-parts":[[2019,1,24]],"date-time":"2019-01-24T20:33:57Z","timestamp":1548362037000},"page":"89-103","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Detecting Manipulated Smartphone Data on Android and iOS Devices"],"prefix":"10.1007","author":[{"given":"Heloise","family":"Pieterse","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Olivier","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Renier","family":"van Heerden","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,1,25]]},"reference":[{"key":"7_CR1","unstructured":"NetMarketShare: Operating System Market Share. \n                  https:\/\/netmarketshare.com\/operating-system-market-share.aspx\n                  \n                . Accessed 04 June 2018"},{"key":"7_CR2","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/978-3-319-67208-3_3","volume-title":"Advances in Digital Forensics XIII","author":"H Pieterse","year":"2017","unstructured":"Pieterse, H., Olivier, M., van Heerden, R.: Evaluating the authenticity of smartphone evidence. Advances in Digital Forensics XIII. IAICT, vol. 511, pp. 41\u201361. Springer, Cham (2017). \n                  https:\/\/doi.org\/10.1007\/978-3-319-67208-3_3"},{"key":"7_CR3","doi-asserted-by":"crossref","unstructured":"Ayers, R., Brothers, S., Jansen, W.: Guidelines on mobile device forensics (draft). NIST Special Publication 800 (2013)","DOI":"10.6028\/NIST.SP.800-101r1"},{"key":"7_CR4","doi-asserted-by":"crossref","unstructured":"Albano, P., Castiglione, A., Cattaneo, G., De Maio, G., De Santis, A.: On the construction of a false alibi on the Android OS. In: Third International Conference on Intelligent Networking and Collaborative Systems (INCoS), pp. 685\u2013690. IEEE (2011)","DOI":"10.1109\/INCoS.2011.129"},{"key":"7_CR5","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"237","DOI":"10.1007\/978-3-662-44952-3_16","volume-title":"Advances in Digital Forensics X","author":"H Pieterse","year":"2014","unstructured":"Pieterse, H., Olivier, M.: Smartphones as distributed witnesses for digital forensics. In: Peterson, G., Shenoi, S. (eds.) DigitalForensics 2014. IAICT, vol. 433, pp. 237\u2013251. Springer, Heidelberg (2014). \n                  https:\/\/doi.org\/10.1007\/978-3-662-44952-3_16"},{"issue":"2","key":"7_CR6","first-page":"82","volume":"2","author":"M Kala","year":"2013","unstructured":"Kala, M., Thilagaraj, R.: A framework for digital forensics in I-devices: jailed and jail broken devices. J. Adv. Libr. Inf. Sci. 2(2), 82\u201393 (2013)","journal-title":"J. Adv. Libr. Inf. Sci."},{"issue":"4","key":"7_CR7","doi-asserted-by":"publisher","first-page":"394","DOI":"10.1108\/ICS-10-2014-0071","volume":"23","author":"M Tsavli","year":"2015","unstructured":"Tsavli, M., Efraimidis, P.S., Katos, V.: Reengineering the user: privacy concerns about personal data on smartphones. Inf. Comput. Secur. 23(4), 394\u2013405 (2015)","journal-title":"Inf. Comput. Secur."},{"key":"7_CR8","doi-asserted-by":"publisher","first-page":"44","DOI":"10.1016\/j.diin.2006.06.005","volume":"3","author":"R Harris","year":"2006","unstructured":"Harris, R.: Arriving at an anti-forensics consensus: examining how to define and control the anti-forensics problem. Digit. Invest. 3, 44\u201349 (2006)","journal-title":"Digit. Invest."},{"key":"7_CR9","doi-asserted-by":"crossref","unstructured":"Albano, P., Castiglione, A., Cattaneo, G., De Santis, A.: A novel anti-forensics technique for the Android OS. In: International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA), pp. 380\u2013385. IEEE (2011)","DOI":"10.1109\/BWCCA.2011.62"},{"key":"7_CR10","doi-asserted-by":"crossref","unstructured":"Azedegan, S., Yu, W., Liu, H., Sistani, M., Acharya, S.: Novel anti-forensics approaches for smart phones. In: 45th Hawaii International Conference on System Sciences (HICSS), pp. 5424\u20135431. IEEE (2012)","DOI":"10.1109\/HICSS.2012.452"},{"key":"7_CR11","doi-asserted-by":"crossref","unstructured":"D\u2019Orazio, C., Ariffin, A., Choo, K.: iOS anti-forensics: how can we securely conceal, delete and insert data? In: 47th Hawaii International Conference o System Sciences (HICSS), pp. 4838\u20134847. IEEE (2014)","DOI":"10.1109\/HICSS.2014.594"},{"key":"7_CR12","doi-asserted-by":"crossref","unstructured":"Karlsson, K., Glisson, W.: Android anti-forensics: modifying cyanogenMod. In: 47th Hawaii International Conference of System Sciences (HICSS), pp. 4828\u20134837. IEEE (2014)","DOI":"10.1109\/HICSS.2014.593"},{"key":"7_CR13","doi-asserted-by":"crossref","unstructured":"Zheng, J., Tan, Y., Zhang, X., Liang, C., Zhang, C., Zheng, J.: An anti-forensics method against memory acquiring for Android devices. In: International Conference on Computational Science and Engineering (CSE) and Embedded and Ubiquitous Computing (EUC), pp. 214\u2013218. IEEE (2017)","DOI":"10.1109\/CSE-EUC.2017.45"},{"key":"7_CR14","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1007\/978-3-662-44952-3_14","volume-title":"Advances in Digital Forensics X","author":"R Verma","year":"2014","unstructured":"Verma, R., Govindaraj, J., Gupta, G.: Preserving dates and timestamps for incident handling in Android smartphones. In: Peterson, G., Shenoi, S. (eds.) DigitalForensics 2014. IAICT, vol. 433, pp. 209\u2013225. Springer, Heidelberg (2014). \n                  https:\/\/doi.org\/10.1007\/978-3-662-44952-3_14"},{"key":"7_CR15","doi-asserted-by":"crossref","unstructured":"Govindaraj, J., Verma, R., Mata, R., Gupta, G.: iSecureRing: forensic ready secure iOS apps for jailbroken iPhones. In: 35th IEEE Symposium on Security and Privacy (2014)","DOI":"10.1007\/978-3-319-24123-4_14"},{"key":"7_CR16","doi-asserted-by":"crossref","unstructured":"Pieterse, H., Olivier, M., van Heerden, R.: Playing hide-and-seek: detecting the manipulation of Android timestamps. In: Information Security for South Africa, pp. 1\u20138. IEEE (2015)","DOI":"10.1109\/ISSA.2015.7335065"},{"issue":"1","key":"7_CR17","first-page":"1","volume":"4","author":"J Lessard","year":"2010","unstructured":"Lessard, J., Kessler, G.: Android forensics: Simplifying cell phone examinations. Small Scale Digit. Dev. Forensics J. 4(1), 1\u201312 (2010)","journal-title":"Small Scale Digit. Dev. Forensics J."},{"key":"7_CR18","unstructured":"Android: Platform architecture. \n                  http:\/\/developer.android.com\/guide\/platform\/\n                  \n                . Accessed 04 Oct 2017"},{"key":"7_CR19","unstructured":"Zimmermann, C., Spreitzenbarth, M., Schmitt, S., Freiling F.C.: Forensic analysis of YAFFS2. In: Sicherheit, pp. 59\u201369 (2012)"},{"key":"7_CR20","doi-asserted-by":"publisher","first-page":"745","DOI":"10.1007\/978-3-642-27552-4_98","volume-title":"Frontiers in Computer Education","author":"H-J Kim","year":"2013","unstructured":"Kim, H.-J., Kim, J.-S.: Tuning the EXT4 filesystem performance for Android-based smartphones. In: Sambath, S., Zhu, E. (eds.) Frontiers in Computer Education, vol. 133, pp. 745\u2013752. Springer, Heidelberg (2013). \n                  https:\/\/doi.org\/10.1007\/978-3-642-27552-4_98"},{"key":"7_CR21","volume-title":"Learning Android Forensics","author":"R Tamma","year":"2015","unstructured":"Tamma, R., Tindall, D.: Learning Android Forensics. Packt Publishing Ltd., Birmingham\/Mumbai (2015)"},{"issue":"4","key":"7_CR22","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1109\/MPOT.2011.2182571","volume":"31","author":"K Tracy","year":"2012","unstructured":"Tracy, K.: Mobile application development experiences on Apple\u2019s iOS and Android OS. IEEE Potentials 31(4), 30\u201334 (2012)","journal-title":"IEEE Potentials"},{"key":"7_CR23","unstructured":"Apple: iOS technology overview. \n                  http:\/\/developer.apple.com\/library\/content\/documentation\/Miscellaneous\/Conceptual\/iPhoneOSTechOverviewIntroduction\/Introduction.html\n                  \n                . Accessed 05 Oct 2017"},{"issue":"2","key":"7_CR24","first-page":"220","volume":"6","author":"M Kanoi","year":"2013","unstructured":"Kanoi, M., Jdiet, Y.: Internal structure of iOS and building tools for iOS apps. Int. J. Comput. Sci. Appl. 6(2), 220\u2013225 (2013)","journal-title":"Int. J. Comput. Sci. Appl."},{"key":"7_CR25","unstructured":"Tamura, E., Giampaolo, D.: Introducing Apple file system. Technical report. Apple, Inc. (2016)"},{"key":"7_CR26","volume-title":"Learning iOS Forensics","author":"M Epifani","year":"2016","unstructured":"Epifani, M., Stirparo, P.: Learning iOS Forensics. Packt Publishing Ltd., Birmingham\/Mumbai (2016)"},{"key":"7_CR27","volume-title":"iPhone Forensics: Recovering Evidence, Personal Data and Corporate Assets","author":"J Zdziarski","year":"2008","unstructured":"Zdziarski, J.: iPhone Forensics: Recovering Evidence, Personal Data and Corporate Assets, 1st edn. O\u2019Reilly Media Inc., Sebastopol (2008)","edition":"1"},{"key":"7_CR28","unstructured":"Egele, M., Kruegel, C., Kirda, E., Vigna, G.: PiOS: detecting privacy leaks in iOS applications. In: NDSS, pp. 177\u2013183 (2011)"},{"issue":"6","key":"7_CR29","doi-asserted-by":"publisher","first-page":"707","DOI":"10.1007\/s00779-011-0428-7","volume":"16","author":"S Jeon","year":"2012","unstructured":"Jeon, S., Bang, J., Byun, K., Lee, S.: A recovery method of deleted record for SQLite database. Pers. Ubiquit. Comput. 16(6), 707\u2013715 (2012)","journal-title":"Pers. Ubiquit. Comput."},{"key":"7_CR30","unstructured":"SQLite: About SQLite. \n                  https:\/\/www.sqlite.org\/about.html\n                  \n                . Accessed 24 Apr 2018"},{"key":"7_CR31","unstructured":"Patodi, P.: Database recovery mechanism for Android devices. Ph.D. thesis. Indian Institute of Technology, Bombay (2012)"},{"key":"7_CR32","unstructured":"SQLite: Database file format. \n                  https:\/\/www.sqlite.org\/fileformat.html\n                  \n                . Accessed 24 Apr 2018"},{"key":"7_CR33","unstructured":"SQLite: Write-ahead logging. \n                  https:\/\/www.sqlite.org\/wal.html\n                  \n                . Accessed 24 Apr 2018"},{"key":"7_CR34","unstructured":"SQLite: Command line shell for SQLite. \n                  https:\/\/www.sqlite.org\/cli.html\n                  \n                . Accessed 25 Apr 2018"},{"key":"7_CR35","unstructured":"Android Studio: Android debug bridge (ADB). \n                  http:\/\/developer.android.com\/studio\/command-line\/adb.html\n                  \n                . Accessed 13 Jan 2018"},{"issue":"12","key":"7_CR36","first-page":"21","volume":"24","author":"B Schneier","year":"1999","unstructured":"Schneier, B.: Attack trees. Dr. Dobb\u2019s J. 24(12), 21\u201329 (1999)","journal-title":"Dr. Dobb\u2019s J."}],"container-title":["Communications in Computer and Information Science","Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-11407-7_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,20]],"date-time":"2019-05-20T23:57:11Z","timestamp":1558396631000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-11407-7_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030114060","9783030114077"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-11407-7_7","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"25 January 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ISSA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Information Security Conference","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Pretoria","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"South Africa","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 August 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 August 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"issa2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.infosecsa.co.za\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"40","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"13","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"33% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}}]}}