{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T16:26:42Z","timestamp":1782836802381,"version":"3.54.5"},"reference-count":68,"publisher":"Elsevier","isbn-type":[{"value":"9780128053034","type":"print"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1016\/b978-0-12-805303-4.00002-2","type":"book-chapter","created":{"date-parts":[[2017,1,7]],"date-time":"2017-01-07T18:43:19Z","timestamp":1483814599000},"page":"7-20","source":"Crossref","is-referenced-by-count":15,"title":["Forensics Analysis of Android Mobile VoIP Apps"],"prefix":"10.1016","author":[{"given":"T.","family":"Dargahi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"A.","family":"Dehghantanha","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"M.","family":"Conti","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0010","series-title":"Number of smartphone users worldwide from 2014 to 2019","year":"2016"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0015","first-page":"9","article-title":"iForensics: forensic analysis of instant messaging on smart phones","author":"Husain","year":"2009"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0020","doi-asserted-by":"crossref","first-page":"469","DOI":"10.1080\/00450618.2015.1066854","article-title":"Investigating Social Networking applications on smartphones detecting Facebook, Twitter, LinkedIn and Google+ artefacts on Android and iOS platforms","volume":"48","author":"Norouzizadeh Dezfouli","year":"2016","journal-title":"Aust. J. Forensic Sci."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0025","series-title":"Proceedings of the 7th International Conference on Information Assurance and Security (IAS\u201911)","first-page":"62","article-title":"Towards data centric mobile security","author":"Dehghantanha","year":"2011"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0030","doi-asserted-by":"crossref","first-page":"998","DOI":"10.1109\/COMST.2014.2386139","article-title":"Android security: a survey of issues, malware penetration, and defenses","volume":"17","author":"Faruki","year":"2015","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0035","series-title":"Proceedings of the 8th International Conference on Security of Information and Networks (SIN\u201915)","first-page":"290","article-title":"A robust dynamic analysis system preventing SandBox detection by Android malware","author":"Gajrani","year":"2015"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0040","series-title":"Proceedings of the 13th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom\u201914)","first-page":"414","article-title":"Evaluation of Android anti-malware techniques against dalvik bytecode obfuscation","author":"Faruki","year":"2014"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0045","series-title":"Proceedings of the International Conference on Security and Privacy in Communication Networks (SecureComm\u201914)","first-page":"556","article-title":"Platform neutral sandbox for analyzing malware and resource hogger apps","author":"Faruki","year":"2014"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0050","series-title":"Proceedings of the 1st IEEE European Symposium on Security and Privacy (EuroSP\u201916)","article-title":"AppScanner: automatic fingerprinting of smartphone apps from encrypted network traffic","author":"Taylor","year":"2016"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0055","first-page":"21","article-title":"Trends in Android malware detection","volume":"8","author":"Shaerpour","year":"2013","journal-title":"J. Digit. Forensics Sec. Law"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0060","first-page":"10","article-title":"A survey on malware propagation, analysis, and detection","volume":"2","author":"Damshenas","year":"2013","journal-title":"Int. J. Cyber-Sec. Digit. Forensics"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0065","doi-asserted-by":"crossref","first-page":"141","DOI":"10.1080\/15536548.2015.1073510","article-title":"M0droid: An Android behavioral-based malware detection model","volume":"11","author":"Damshenas","year":"2015","journal-title":"J. Inf. Privacy Sec."},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0070","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1109\/TDSC.2014.2300482","article-title":"MOSES: supporting and enforcing security profiles on smartphones","volume":"11","author":"Zhauniarovich","year":"2014","journal-title":"IEEE Trans. Depend. Secure Comput."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0075","first-page":"65","article-title":"MITHYS: Mind the hand you shake-protecting mobile devices from ssl usage vulnerabilities","author":"Conti","year":"2013"},{"issue":"5","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0080","doi-asserted-by":"crossref","first-page":"1426","DOI":"10.1109\/TIFS.2012.2204249","article-title":"Cr\u00eape: a system for enforcing fine-grained context-related policies on Android","volume":"7","author":"Conti","year":"2012","journal-title":"IEEE Trans. Inf. Forensics Sec."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0085","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.comcom.2016.03.002","article-title":"ABAKA: a novel attribute-based k-anonymous collaborative solution for LBSs","volume":"85","author":"Dargahi","year":"2016","journal-title":"Comput. Commun."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0090","series-title":"Proceedings of the 11th Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA\u201914)","first-page":"92","article-title":"I sensed it was you: authenticating mobile users with sensor-enhanced keystroke dynamics","author":"Giuffrida","year":"2014"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0095","series-title":"Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security (SIGSAC ASIACCS\u201911)","first-page":"249","article-title":"Mind how you answer me!: transparently authenticating the user of a smartphone when answering or placing a call","author":"Conti","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0100","series-title":"Proceedings of the 6th ACM Conference on Data and Application Security and Privacy (SIGSAC CODASPY\u201916)","article-title":"On the effectiveness of sensor-enhanced keystroke dynamics against statistical attacks","author":"Stanciu","year":"2016"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0105","first-page":"171","article-title":"The partial digital evidence disclosure in respect to the instant messaging embedded in Viber application regarding an Android smart phone","author":"Chu","year":"2012"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0110","doi-asserted-by":"crossref","first-page":"677","DOI":"10.1016\/j.jnca.2012.12.024","article-title":"Windows mobile LiveSD forensics","volume":"36","author":"Canlar","year":"2013","journal-title":"J. Netw. Comput. Appl."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0115","series-title":"Proceedings of the 3rd International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec\u201914)","first-page":"22","article-title":"An approach for forensic investigation in Firefox OS","author":"Yusoff","year":"2014"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0120","series-title":"Proceedings of the 3rd International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec\u201914)","first-page":"27","article-title":"Mobile forensic data acquisition in Firefox OS","author":"Yusoff","year":"2014"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0125","first-page":"209","article-title":"A survey on digital forensics trends","volume":"3","author":"Damshenas","year":"2014","journal-title":"Int. J. Cyber-Sec. Digit. Forensics"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0130","first-page":"130","article-title":"Performance measurement for mobile forensic data acquisition in Firefox OS","volume":"3","author":"Yusoff","year":"2014","journal-title":"Int. J. Cyber-Sec. Digit. Forensics"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0135","first-page":"48","article-title":"Digital forensic trends and future","volume":"2","author":"Dezfoli","year":"2013","journal-title":"Int. J. Cyber-Sec. Digit. Forensics"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0140","series-title":"Smartphone OS Market Share, 2015 Q2","year":"2015"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0145","series-title":"Gartner Says Emerging Markets Drove Worldwide Smartphone Sales to 15.5 Percent Growth in Third Quarter of 2015","year":"2011"},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0150","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1109\/TIFS.2015.2478741","article-title":"Analyzing android encrypted network traffic to identify user actions","volume":"11","author":"Conti","year":"2016","journal-title":"IEEE Trans. Inf. Forensics Sec."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0155","series-title":"Proceedings of the 5th ACM Conference on Data and Application Security and Privacy (CODASPY\u201915)","first-page":"297","article-title":"Can\u2019t you hear me knocking: identification of user actions on Android apps via traffic analysis","author":"Conti","year":"2015"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0160","series-title":"Proceedings of the 2015 Workshop on IoT Challenges in Mobile and Industrial Systems (IoT-Sys\u201915)","first-page":"49","article-title":"On the feasibility of attribute-based encryption on smartphone devices","author":"Ambrosin","year":"2015"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0165","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1080\/00450618.2016.1153714","article-title":"Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices","author":"Daryabar","year":"2016","journal-title":"Aust. J. Forensic Sci."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0170","series-title":"Proceedings of the 2012 International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec)","first-page":"201","article-title":"VoIP evidence model: a new forensic method for investigating VoIP malicious attacks","author":"Ibrahim","year":"2012"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0175","first-page":"183","article-title":"Modelling based approach for reconstructing evidence of VoIP malicious attacks","volume":"3","author":"Ibrahim","year":"2014","journal-title":"Int. J. Cyber-Sec. Digit. Forensics"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0180","unstructured":"Viber Android Apps on Google Play [online], https:\/\/play.google.com\/store\/apps\/details?id=com.viber.voip&hl=en (accessed 11.03.16)."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0185","unstructured":"Skype\u2014Free IM & video calls Android Apps on Google Play [online], https:\/\/play.google.com\/store\/apps\/details?id=com.skype.raider&hl=en (accessed 11.03.16)."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0190","unstructured":"WhatsApp Messenger Android Apps on Google Play [online], https:\/\/play.google.com\/store\/apps\/details?id=com.whatsapp&hl=en (accessed 11.03.16)."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0195","series-title":"Digital Evidence and Computer Crime. Forensic Science, Computers, and the Internet","article-title":"Digital evidence on mobile devices","author":"Casey","year":"2011"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0200","doi-asserted-by":"crossref","first-page":"351","DOI":"10.7763\/IJCTE.2013.V5.708","article-title":"Towards a unified forensic investigation framework of smartphones","volume":"5","author":"Mohtasebi","year":"2013","journal-title":"Int. J. Comput. Theory Eng."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0205","series-title":"Proceedings of the 3rd International Conference on Electronics Computer Technology (ICECT\u201911)","first-page":"264","article-title":"Framework of digital forensics for the Samsung Star Series phone","volume":"2","author":"Parvez","year":"2011"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0210","first-page":"651","article-title":"Smartphone forensics: a case study with Nokia E5-00 mobile phone","volume":"1","author":"Mohtasebi","year":"2011","journal-title":"Int. J. Digit. Inf. Wirel. Commun."},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0215","doi-asserted-by":"crossref","first-page":"23","DOI":"10.1016\/j.diin.2011.05.016","article-title":"A comparison of forensic evidence recovery techniques for a windows mobile smart phone","volume":"8","author":"Grispos","year":"2011","journal-title":"Digit. Investig."},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0220","doi-asserted-by":"crossref","first-page":"170","DOI":"10.1016\/j.diin.2012.12.002","article-title":"Forensic access to Windows mobile pim.vol and other Embedded Database (EDB) volumes","volume":"9","author":"Kaart","year":"2013","journal-title":"Digit. Investig."},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0225","doi-asserted-by":"crossref","first-page":"136","DOI":"10.1016\/j.diin.2010.01.004","article-title":"Introduction to windows mobile forensics","volume":"6","author":"Casey","year":"2010","journal-title":"Digit. Investig."},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0230","doi-asserted-by":"crossref","first-page":"e0150300","DOI":"10.1371\/journal.pone.0150300","article-title":"Windows instant messaging app forensics: Facebook and Skype as case studies","volume":"11","author":"Yang","year":"2016","journal-title":"PLoS ONE"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0235","doi-asserted-by":"crossref","first-page":"S74","DOI":"10.1016\/j.diin.2010.05.010","article-title":"Live memory forensics of mobile phones","volume":"7","author":"Thing","year":"2010","journal-title":"Digit. Investig."},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0240","doi-asserted-by":"crossref","first-page":"323","DOI":"10.1016\/j.diin.2013.10.003","article-title":"A critical review of 7 years of Mobile Device Forensics","volume":"10","author":"Barmpatsalou","year":"2013","journal-title":"Digit. Investig."},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0245","first-page":"1","article-title":"Android forensics: simplifying cell phone examinations","volume":"4","author":"Lessard","year":"2010","journal-title":"Small Scale Digit. Device Forensics J."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0250","doi-asserted-by":"crossref","first-page":"S14","DOI":"10.1016\/j.diin.2011.05.003","article-title":"Toward a general collection methodology for Android devices","volume":"8","author":"Vidas","year":"2011","journal-title":"Digit. Investig."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0255","series-title":"Cloud Secur. Ecosyst.","first-page":"285","article-title":"Conceptual evidence collection and analysis methodology for Android devices","author":"Martini","year":"2015"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0260","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1016\/j.diin.2012.07.001","article-title":"An integrated conceptual digital forensic framework for cloud computing","volume":"9","author":"Martini","year":"2012","journal-title":"Digit. Investig."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0265","series-title":"Cloud Secur. Ecosyst.","first-page":"285","article-title":"Mobile cloud forensics: an analysis of seven popular Android apps","author":"Martini","year":"2015"},{"issue":"9","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0270","doi-asserted-by":"crossref","first-page":"e0138449","DOI":"10.1371\/journal.pone.0138449","article-title":"A forensically sound adversary model for mobile devices","volume":"10","author":"Do","year":"2015","journal-title":"PLoS ONE"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0275","series-title":"Proceedings of the 49th Annual Hawaii International Conference on System Sciences (HICSS\u201916)","first-page":"5597","article-title":"An Android social app forensics adversary model","author":"Azfar","year":"2016"},{"issue":"7","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0280","article-title":"Skype forensics in Android devices","volume":"78","author":"Al-Saleh","year":"2013","journal-title":"Int. J. Comput. Appl."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0285","series-title":"Proceedings of the International Conference on Availability, Reliability, and Security (ARES\u201910)","first-page":"283","article-title":"Recovery of skype application activity data from physical memory","author":"Simon","year":"2010"},{"issue":"11","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0290","doi-asserted-by":"crossref","first-page":"708","DOI":"10.12720\/jcm.8.11.708-715","article-title":"Social networks IM forensics: encryption analysis","volume":"8","author":"Al Barghuthi","year":"2013","journal-title":"J. Commun."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0295","series-title":"Forensic analysis of instant messenger applications on Android devices","author":"Mahajan","year":"2013"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0300","doi-asserted-by":"crossref","first-page":"201","DOI":"10.1016\/j.diin.2014.04.003","article-title":"Forensic analysis of WhatsApp messenger on android smartphones","volume":"11","author":"Anglano","year":"2014","journal-title":"Digital Invest. J."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0305","series-title":"Proceedings of the 12th Annual International Conference on Privacy, Security and Trust (PST\u201914)","first-page":"129","article-title":"Privacy-respecting digital investigation","author":"Dehghantanha","year":"2014"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0310","first-page":"77","article-title":"A survey about impacts of cloud computing on digital forensics","volume":"2","author":"Daryabar","year":"2013","journal-title":"Int. J. Cyber-Sec. Digit. Forensics"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0315","first-page":"311","article-title":"A survey on privacy issues in digital forensics","volume":"1","author":"Aminnezhad","year":"2012","journal-title":"Int. J. Cyber-Sec. Digit. Forensics"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0320","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1016\/j.cose.2014.01.004","article-title":"Evaluating the privacy of Android mobile applications under forensic analysis","volume":"42","author":"Ntantogian","year":"2014","journal-title":"Comput. Sec."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0325","series-title":"Proceedings of the 21st Americas Conference on Information Systems","article-title":"Privacy risks in mobile dating apps","author":"Farnden","year":"2015"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0330","series-title":"Proceedings of the 21st Americas Conference on Information Systems","article-title":"Forensic taxonomy of popular Android mHealth apps","author":"Azfar","year":"2015"},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0335","unstructured":"Samsung Odin [online], http:\/\/odindownload.com\/."},{"issue":"5","key":"10.1016\/B978-0-12-805303-4.00002-2_bb0340","article-title":"Significance of hash value generation in digital forensic: a case study","volume":"2","author":"Kumar","year":"2012","journal-title":"Int. J. Eng. Res. Dev."},{"key":"10.1016\/B978-0-12-805303-4.00002-2_bb0345","series-title":"Proceedings of the 3rd ACM Workshop on Security and Privacy in Smartphones & Mobile Devices","first-page":"3","article-title":"Deadbolt: locking down android disk encryption","author":"Skillen","year":"2013"}],"container-title":["Contemporary Digital Forensic Investigations of Cloud and Mobile Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:B9780128053034000022?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:B9780128053034000022?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2018,9,5]],"date-time":"2018-09-05T02:52:45Z","timestamp":1536115965000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/B9780128053034000022"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9780128053034"],"references-count":68,"URL":"https:\/\/doi.org\/10.1016\/b978-0-12-805303-4.00002-2","relation":{},"subject":[],"published":{"date-parts":[[2017]]}}}