{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T16:40:59Z","timestamp":1783010459769,"version":"3.54.6"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,10,15]],"date-time":"2018-10-15T00:00:00Z","timestamp":1539561600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,10,15]]},"DOI":"10.1145\/3243734.3243808","type":"proceedings-article","created":{"date-parts":[[2018,10,16]],"date-time":"2018-10-16T17:38:33Z","timestamp":1539711513000},"page":"1338-1350","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["EviHunter"],"prefix":"10.1145","author":[{"given":"Chris Chao-Chun","family":"Cheng","sequence":"first","affiliation":[{"name":"Iowa State University, Ames, IA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chen","family":"Shi","sequence":"additional","affiliation":[{"name":"Iowa State University, Ames, IA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Neil Zhenqiang","family":"Gong","sequence":"additional","affiliation":[{"name":"Iowa State University, Ames, IA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yong","family":"Guan","sequence":"additional","affiliation":[{"name":"Iowa State University, Ames, IA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2018,10,15]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.5120\/13504-1253"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2017.05.421"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.04.003"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897927"},{"key":"e_1_3_2_2_6_1","unstructured":"Evan Bush. 2017. Suspects' phones led Northwest investigators to carcasses in one of the biggest poaching cases they've ever seen. https:\/\/goo.gl\/nUQyNA  Evan Bush. 2017. Suspects' phones led Northwest investigators to carcasses in one of the biggest poaching cases they've ever seen. https:\/\/goo.gl\/nUQyNA"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"crossref","unstructured":"Stefano Calzavara Ilya Grishchenko and Matteo Maffei. 2016. HornDroid: Practical and Sound Static Analysis of Android Applications by SMT Solving. In EuroS&P.  Stefano Calzavara Ilya Grishchenko and Matteo Maffei. 2016. HornDroid: Practical and Sound Static Analysis of Android Applications by SMT Solving. In EuroS&P.","DOI":"10.1109\/EuroSP.2016.16"},{"key":"e_1_3_2_2_8_1","unstructured":"Matthew Dering Somesh Jha Patrick McDaniel Damien Octeau Daniel Luchaup. 2015. Composite Constant Propagation: Application to Android Inter-Component Communication Analysis. In ICSE.  Matthew Dering Somesh Jha Patrick McDaniel Damien Octeau Daniel Luchaup. 2015. Composite Constant Propagation: Application to Android Inter-Component Communication Analysis. In ICSE."},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"crossref","unstructured":"F. Daryabar M. H. Tadayon A. Parsi and H. Sadjadi. 2016. Automated analysis method for forensic investigation of cloud applications on Android. In IST.  F. Daryabar M. H. Tadayon A. Parsi and H. Sadjadi. 2016. Automated analysis method for forensic investigation of cloud applications on Android. In IST.","DOI":"10.1109\/ISTEL.2016.7881799"},{"key":"e_1_3_2_2_10_1","volume-title":"Sheth","author":"Enck William","year":"2010","unstructured":"William Enck , Peter Gilbert , Byung-Gon Chun , Landon P. Cox , Jaeyeon Jung , Patrick McDaniel , and Anmol N . Sheth . 2010 . TaintDroid: An Information-flow Tracking System for Realtime Privacy Monitoring on Smartphones. In OSDI. William Enck, Peter Gilbert, Byung-Gon Chun, Landon P. Cox, Jaeyeon Jung, Patrick McDaniel, and Anmol N. Sheth. 2010. TaintDroid: An Information-flow Tracking System for Realtime Privacy Monitoring on Smartphones. In OSDI."},{"key":"e_1_3_2_2_11_1","volume-title":"Scandroid: Automated security certification of android. Technical Report.","author":"Fuchs Adam P","year":"2009","unstructured":"Adam P Fuchs , Avik Chaudhuri , and Jeffrey S Foster . 2009 . Scandroid: Automated security certification of android. Technical Report. Adam P Fuchs, Avik Chaudhuri, and Jeffrey S Foster. 2009. Scandroid: Automated security certification of android. Technical Report."},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30921-2_17"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"crossref","unstructured":"Michael I Gordon Deokhwan Kim Jeff H Perkins Limei Gilham Nguyen Nguyen and Martin C Rinard. 2015. Information Flow Analysis of Android Applications in DroidSafe.. In NDSS.  Michael I Gordon Deokhwan Kim Jeff H Perkins Limei Gilham Nguyen Nguyen and Martin C Rinard. 2015. Information Flow Analysis of Android Applications in DroidSafe.. In NDSS.","DOI":"10.14722\/ndss.2015.23089"},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2013.06.002"},{"key":"e_1_3_2_2_15_1","unstructured":"Hans Henseler. 2017. Finding digital evidence in mobile devices. In DFRWS.  Hans Henseler. 2017. Finding digital evidence in mobile devices. In DFRWS."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.09.002"},{"key":"e_1_3_2_2_17_1","volume-title":"MoST","volume":"12","author":"Kim Jinyung","year":"2012","unstructured":"Jinyung Kim , Yongho Yoon , Kwangkeun Yi , Junbum Shin , and SWRD Center . 2012 . ScanDal: Static analyzer for detecting privacy leaks in android applications . MoST , Vol. 12 (2012). Jinyung Kim, Yongho Yoon, Kwangkeun Yi, Junbum Shin, and SWRD Center. 2012. ScanDal: Static analyzer for detecting privacy leaks in android applications. MoST, Vol. 12 (2012)."},{"key":"e_1_3_2_2_18_1","volume-title":"The 5th Joint Workshop on Information Security.","author":"Lee Xinfang","year":"2009","unstructured":"Xinfang Lee , Chunghuang Yang , Shihjen Chen , and Jainshing Wu . 2009 . Design and implementation of forensic system in Android smart phone . In The 5th Joint Workshop on Information Security. Xinfang Lee, Chunghuang Yang, Shihjen Chen, and Jainshing Wu. 2009. Design and implementation of forensic system in Android smart phone. In The 5th Joint Workshop on Information Security."},{"key":"e_1_3_2_2_19_1","unstructured":"Hannah Leone. 2017. GPS evidence can be used in Aurora KFC shooting case. https:\/\/goo.gl\/28rGnN  Hannah Leone. 2017. GPS evidence can be used in Aurora KFC shooting case. https:\/\/goo.gl\/28rGnN"},{"key":"e_1_3_2_2_20_1","volume-title":"Steven Arzt, Siegfried Rasthofer, Eric Bodden, Damien Octeau, and Patrick McDaniel.","author":"Li Li","year":"2015","unstructured":"Li Li , Alexandre Bartel , Tegawend\u00e9 F. Bissyand\u00e9 , Jacques Klein , Yves Le Traon , Steven Arzt, Siegfried Rasthofer, Eric Bodden, Damien Octeau, and Patrick McDaniel. 2015 . IccTA: Detecting Inter-component Privacy Leaks in Android Apps. In ICSE. Li Li, Alexandre Bartel, Tegawend\u00e9 F. Bissyand\u00e9, Jacques Klein, Yves Le Traon, Steven Arzt, Siegfried Rasthofer, Eric Bodden, Damien Octeau, and Patrick McDaniel. 2015. IccTA: Detecting Inter-component Privacy Leaks in Android Apps. In ICSE."},{"key":"e_1_3_2_2_21_1","unstructured":"Mark Lohrum. 2014. Live imaging an Android device Not as hard as it sounds if you break it down. https:\/\/freeandroidforensics.blogspot.kr\/2014\/08\/live-imaging-android-device.html  Mark Lohrum. 2014. Live imaging an Android device Not as hard as it sounds if you break it down. https:\/\/freeandroidforensics.blogspot.kr\/2014\/08\/live-imaging-android-device.html"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382223"},{"key":"e_1_3_2_2_23_1","volume-title":"International Conference on Cybercrime, Security and Digital Forensics.","author":"Maus Stefan","year":"2011","unstructured":"Stefan Maus , Hans H\u00f6fken , and Marko Schuba . 2011 . Forensic analysis of geodata in android smartphones . In International Conference on Cybercrime, Security and Digital Forensics. Stefan Maus, Hans H\u00f6fken, and Marko Schuba. 2011. Forensic analysis of geodata in android smartphones. In International Conference on Cybercrime, Security and Digital Forensics."},{"key":"e_1_3_2_2_24_1","volume-title":"Police Blotter: Web searches lead to murder conviction. https:\/\/goo.gl\/HqJ6h4","author":"DECLAN","year":"2010","unstructured":"DECLAN MCCULLAGH. 2010 . Police Blotter: Web searches lead to murder conviction. https:\/\/goo.gl\/HqJ6h4 DECLAN MCCULLAGH. 2010. Police Blotter: Web searches lead to murder conviction. https:\/\/goo.gl\/HqJ6h4"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2013.366"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813656"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"crossref","unstructured":"Siegfried Rasthofer Steven Arzt and Eric Bodden. 2014. A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks.. In NDSS.  Siegfried Rasthofer Steven Arzt and Eric Bodden. 2014. A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks.. In NDSS.","DOI":"10.14722\/ndss.2014.23039"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2996358"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813650"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813720"},{"key":"e_1_3_2_2_31_1","volume-title":"Usenix Security Symposium.","author":"Saltaformaggio Brendan","unstructured":"Brendan Saltaformaggio , Rohit Bhatia , Xiangyu Zhang , Dongyan Xu , and Golden G . Richard III. 2016. Screen After Previous Screens: Spatial-Temporal Recreation of Android App Displays from Memory Images . In Usenix Security Symposium. Brendan Saltaformaggio, Rohit Bhatia, Xiangyu Zhang, Dongyan Xu, and Golden G. Richard III. 2016. Screen After Previous Screens: Spatial-Temporal Recreation of Android App Displays from Memory Images. In Usenix Security Symposium."},{"key":"e_1_3_2_2_32_1","volume-title":"Usenix Security Symposium.","author":"Saltaformaggio Brendan","year":"2014","unstructured":"Brendan Saltaformaggio , Zhongshu Gu , Xiangyu Zhang , and Dongyan Xu . 2014 . DSCRETE: Automatic Rendering of Forensic Information from Memory Images via Application Logic Reuse . In Usenix Security Symposium. Brendan Saltaformaggio, Zhongshu Gu, Xiangyu Zhang, and Dongyan Xu. 2014. DSCRETE: Automatic Rendering of Forensic Information from Memory Images via Application Logic Reuse. In Usenix Security Symposium."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978343"},{"key":"e_1_3_2_2_34_1","unstructured":"United States v. Brendt A. Christensen. 2017. Criminal Complaint United States District Court Central District of Illinois. https:\/\/goo.gl\/b81btj  United States v. Brendt A. Christensen. 2017. Criminal Complaint United States District Court Central District of Illinois. https:\/\/goo.gl\/b81btj"},{"key":"e_1_3_2_2_35_1","unstructured":"Raja Vall\u00e9e-Rai Phong Co Etienne Gagnon Laurie Hendren Patrick Lam and Vijay Sundaresan. 1999. Soot - a Java Bytecode Optimization Framework. In CASCON.  Raja Vall\u00e9e-Rai Phong Co Etienne Gagnon Laurie Hendren Patrick Lam and Vijay Sundaresan. 1999. Soot - a Java Bytecode Optimization Framework. In CASCON."},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2637364.2592003"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660357"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.11.002"},{"key":"e_1_3_2_2_39_1","volume-title":"Neil Zhengqiang Gong, and Yong Guan.","author":"Xu Zhen","year":"2018","unstructured":"Zhen Xu , Chen Shi , Chris Chao-Chun Cheng , Neil Zhengqiang Gong, and Yong Guan. 2018 . A Dynamic Taint Analysis Tool for Android App Forensics. In SADFE. Zhen Xu, Chen Shi, Chris Chao-Chun Cheng, Neil Zhengqiang Gong, and Yong Guan. 2018. A Dynamic Taint Analysis Tool for Android App Forensics. In SADFE."},{"key":"e_1_3_2_2_40_1","volume-title":"Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART. In Usenix Security Symposium.","author":"Xue Lei","year":"2017","unstructured":"Lei Xue , Yajin Zhou , Ting Chen , Xiapu Luo , and Guofei Gu . 2017 . Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART. In Usenix Security Symposium. Lei Xue, Yajin Zhou, Ting Chen, Xiapu Luo, and Guofei Gu. 2017. Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART. In Usenix Security Symposium."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCSE.2012.26"}],"event":{"name":"CCS '18: 2018 ACM SIGSAC Conference on Computer and Communications Security","location":"Toronto Canada","acronym":"CCS '18","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243808","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3243734.3243808","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:08:19Z","timestamp":1750212499000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243808"}},"subtitle":["Identifying Digital Evidence in the Permanent Storage of Android Devices via Static Analysis"],"short-title":[],"issued":{"date-parts":[[2018,10,15]]},"references-count":41,"alternative-id":["10.1145\/3243734.3243808","10.1145\/3243734"],"URL":"https:\/\/doi.org\/10.1145\/3243734.3243808","relation":{},"subject":[],"published":{"date-parts":[[2018,10,15]]},"assertion":[{"value":"2018-10-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}