{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T09:55:18Z","timestamp":1780480518380,"version":"3.54.1"},"reference-count":47,"publisher":"MDPI AG","issue":"19","license":[{"start":{"date-parts":[[2022,9,22]],"date-time":"2022-09-22T00:00:00Z","timestamp":1663804800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Institute of Information and Communications Technology Planning and Evaluation(IITP) grant funded by the Korean government (MIST)","award":["2022-0-01022"],"award-info":[{"award-number":["2022-0-01022"]}]},{"name":"Institute of Information and Communications Technology Planning and Evaluation(IITP) grant funded by the Korean government (MIST)","award":["NRF-2018R1D1A1B07043349"],"award-info":[{"award-number":["NRF-2018R1D1A1B07043349"]}]},{"name":"Basic Science Research Program through the National Research Foundation of Korea (NRF) funded by the Ministry of Science, ICT and Future Planning","award":["2022-0-01022"],"award-info":[{"award-number":["2022-0-01022"]}]},{"name":"Basic Science Research Program through the National Research Foundation of Korea (NRF) funded by the Ministry of Science, ICT and Future Planning","award":["NRF-2018R1D1A1B07043349"],"award-info":[{"award-number":["NRF-2018R1D1A1B07043349"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Vehicle systems have been one of the fastest-growing fields in recent years. Vehicles are extremely helpful for understanding driver behaviors and have received significant attention from a forensic perspective. Extensive forensic research was previously conducted on on-board vehicle systems, such as an event data recorders, located in the electronic control unit or manufacturer-based infotainment systems. However, unlike previous vehicles that used only manufacturer-based infotainment systems, most vehicles today are equipped with infotainment systems such as Android Auto and Apple CarPlay. These in-vehicle infotainment (IVI) systems connect to mobile devices such as smartphones and tablets. The vehicle can periodically communicate with a smartphone and thus a network outside the vehicle. Drivers can use more services in their vehicles than ever before. Accordingly, an increasing number of diverse data are being stored in vehicles, with mobile devices connected to both the vehicle and the cloud. Such data include information that can be of significant help to investigators in solving problems during forensic investigations. Therefore, forensics of IVI systems such as Android Auto and Apple CarPlay are becoming increasingly important. We analyzed various forensic studies conducted on Android Auto and Apple CarPlay. Most of the research was mainly focused on mobile devices connected through a wired USB connection. The use of wireless-based IVI systems has recently been increasing. However, the analysis of Android Auto and Apple CarPlay from this point of view is insufficient. Therefore, we proposed a forensic methodology that fully considers such limitations. A forensic analysis was conducted on various IVI systems. We also developed an IVI system forensics tool that works based on the proposed methodology.<\/jats:p>","DOI":"10.3390\/s22197196","type":"journal-article","created":{"date-parts":[[2022,9,22]],"date-time":"2022-09-22T23:07:55Z","timestamp":1663888075000},"page":"7196","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["Digital Forensic Case Studies for In-Vehicle Infotainment Systems Using Android Auto and Apple CarPlay"],"prefix":"10.3390","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3941-8423","authenticated-orcid":false,"given":"Yeonghun","family":"Shin","sequence":"first","affiliation":[{"name":"Department of Artificial Intelligence Convergence Network, Ajou University, Suwon 16499, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sungbum","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Artificial Intelligence Convergence Network, Ajou University, Suwon 16499, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wooyeon","family":"Jo","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Virginia Commonwealth University, Richmond, VA 23221, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Taeshik","family":"Shon","sequence":"additional","affiliation":[{"name":"Department of Artificial Intelligence Convergence Network, Ajou University, Suwon 16499, Korea"},{"name":"Department of Cybersecurity, Ajou University, Suwon 16499, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2022,9,22]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"103735","DOI":"10.1016\/j.compind.2022.103735","article-title":"Automatic whitelist generation system for ethernet based in-vehicle network","volume":"142","author":"Jo","year":"2022","journal-title":"Comput. Ind."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"106017","DOI":"10.1016\/j.asoc.2019.106017","article-title":"APAD: Autoencoder-based payload anomaly detection for industrial IoE","volume":"88","author":"Kim","year":"2020","journal-title":"Applied Soft Computing"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Sladovi\u0107, D., Topol\u010di\u0107, D., Hausknecht, K., and Sirovatka, G. (2019, January 20\u201324). Investigating modern cars. Proceedings of the 2019 42nd International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO), Opatija, Croatia.","DOI":"10.23919\/MIPRO.2019.8756732"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"7406","DOI":"10.1109\/TVT.2019.2924906","article-title":"Improving driver identification for the next-generation of in-vehicle software systems","volume":"68","author":"Bouhoute","year":"2019","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"146057","DOI":"10.1109\/ACCESS.2019.2943837","article-title":"Cybersecurity internals of a skoda octavia vRS: A hands on approach","volume":"7","author":"Urquhart","year":"2019","journal-title":"IEEE Access"},{"key":"ref_6","unstructured":"Henry, P. (2022, July 01). Digital Forensics\u2014Automotive Infotainment and Telematics Systems. Available online: https:\/\/www.sans.org\/blog\/digital-forensics-automotive-infotainment-and-telematics-systems\/."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Lacroix, J., El-Khatib, K., and Akalu, R. (2016, January 13\u201317). Vehicular digital forensics: What does my vehicle know about me?. Proceedings of the 6th ACM Symposium on Development and Analysis of Intelligent Vehicular Networks and Applications, Valletta, Malta.","DOI":"10.1145\/2989275.2989282"},{"key":"ref_8","unstructured":"Cohen, T. (2022, July 01). \u201cLook at What My Car Can Do.\u201d DEFCON 19. Available online: https:\/\/www.youtube.com\/watch?v=Jun0cD6x08U."},{"key":"ref_9","first-page":"1","article-title":"Digital forensics for automobile systems: The challenges and a call to arms","volume":"1","author":"Moos","year":"2016","journal-title":"Int. J. Forensic Sci."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"500","DOI":"10.1016\/j.future.2018.05.081","article-title":"Smart vehicle forensics: Challenges and case study","volume":"109","author":"Jacobs","year":"2020","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Ebbers, S., Ising, F., Saatjohann, C., and Schinzel, S. (2021). Grand Theft App: Digital Forensics of Vehicle Assistant Apps. arXiv.","DOI":"10.1145\/3465481.3465754"},{"key":"ref_12","unstructured":"Edwards, S., and Mahalik, H. (2022, July 01). They See Us Rollin\u2019; They Hatin\u2019: Forensics of iOS CarPlay and Android Auto. SANS DFIR. Available online: https:\/\/www.youtube.com\/watch?v=IGhXsfZXL6g."},{"key":"ref_13","unstructured":"Hickman, J. (2022, July 11). Android Auto & Google Assistant. DFRWS USA. Available online: https:\/\/dfrws.org\/presentation\/android-auto-google-assistant-how-google-encourages-hands-free-motoring-2\/."},{"key":"ref_14","unstructured":"Hickman, J. (2022, July 01). Ridin\u2019 with Apple CarPlay, the Binary Hick\u2014Thoughts from a Digital Forensic Practitioner. Available online: https:\/\/thebinaryhick.blog\/2019\/05\/08\/ridin-with-apple-carplay\/."},{"key":"ref_15","unstructured":"Mahalik, H. (2022, July 01). How Android Bluetooth Connections Can Determine If the Hands of a Driver Were on the Wheel during an Accident. Available online: https:\/\/cellebrite.com\/en\/how-android-bluetooth-connections-can-determine-if-the-hands-of-a-driver-were-on-the-wheel-during-an-accident\/."},{"key":"ref_16","unstructured":"Google (2022, July 01). Android Auto. Available online: https:\/\/www.android.com\/auto\/."},{"key":"ref_17","unstructured":"Apple (2022, July 01). Apple CarPlay. Available online: https:\/\/www.apple.com\/ios\/carplay\/."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"77572","DOI":"10.1109\/ACCESS.2020.2989770","article-title":"IEEE 1815.1-based power system security with bidirectional RNN-based network anomalous attack detection for cyber-physical system","volume":"8","author":"Kwon","year":"2020","journal-title":"IEEE Access"},{"key":"ref_19","unstructured":"Schubert, E. (2022, July 01). Developing CarPlay Systems, Part 1. Apple Worldwide Developers Conference. Available online: https:\/\/developer.apple.com\/videos\/play\/wwdc2016\/722\/."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"S80","DOI":"10.1016\/j.diin.2019.04.013","article-title":"Digital forensic practices and methodologies for AI speaker ecosystems","volume":"29","author":"Jo","year":"2019","journal-title":"Digit. Investig."},{"key":"ref_21","first-page":"301010","article-title":"Certificate Injection-Based Encrypted Traffic Forensics in AI Speaker Ecosystem","volume":"33","author":"Shin","year":"2020","journal-title":"Digit. Investig."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Sathe, S.C., and Dongre, N.M. (2018, January 19\u201320). Data acquisition techniques in mobile forensics. Proceedings of the 2nd International Conference on Inventive Systems and Control, Coimbatore, India.","DOI":"10.1109\/ICISC.2018.8399079"},{"key":"ref_23","unstructured":"(2022, September 12). Crankshaft. Available online: https:\/\/getcrankshaft.com\/."},{"key":"ref_24","unstructured":"The Wireshark Team (2022, September 12). Wireshark. Available online: https:\/\/www.wireshark.org\/."},{"key":"ref_25","unstructured":"(2022, September 12). Bluetooth. A New Way to Debug iOS Bluetooth Applications. Available online: https:\/\/developer.apple.com\/download\/more\/?=xcode."},{"key":"ref_26","unstructured":"Sublime, H.Q. (2022, September 12). Sublime Text. Available online: https:\/\/www.sublimetext.com\/."},{"key":"ref_27","unstructured":"(2022, September 12). sqlitebrowser. DB Browser for SQLite. Available online: https:\/\/sqlitebrowser.org\/."},{"key":"ref_28","unstructured":"von Randow, K. (2022, September 12). Charles. Available online: https:\/\/www.charlesproxy.com\/."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"2027","DOI":"10.1109\/COMST.2016.2548426","article-title":"A survey of man in the middle attacks","volume":"18","author":"Conti","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1109\/MSP.2009.12","article-title":"Man-in-the-Middle Attack to the HTTPS Protocol","volume":"7","author":"Callegati","year":"2009","journal-title":"IEEE Security & Privacy"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Fahl, S., Harbach, M., Muders, T., Baumg\u00e4rtner, L., Freisleben, B., and Smith, M. (2012, January 16\u201318). Why Eve and Mallory love Android: An analysis of Android SSL (in) security. Proceedings of the 2012 ACM Conference on Computer and Communications Security, Raleigh North, CA, USA.","DOI":"10.1145\/2382196.2382205"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Onwuzurike, L., and De Cristofaro, E. (2015, January 22\u201326). Danger is my middle name: Experimenting with SSL vulnerabilities in Android apps. Proceedings of the 8th ACM Conference on Security & Privacy in Wireless and Mobile Networks, New York, NY, USA.","DOI":"10.1145\/2766498.2766522"},{"key":"ref_33","unstructured":"Kakao Mobility (2022, September 12). Location-Based Service Terms and Conditions. Available online: https:\/\/policy.kakaomobility.com\/viewer\/?pageCode=LOCATION&languageCode=en."},{"key":"ref_34","unstructured":"Kakao Mobility (2022, September 12). Kakao T Terms of Service. Available online: https:\/\/policy.kakaomobility.com\/viewer\/?pageCode=TERMS."},{"key":"ref_35","unstructured":"(2022, September 12). Kakao Mobility Privacy (Location Information) Policy for Partners. Available online: https:\/\/policy.kakaomobility.com\/viewer\/?pageCode=PRIVACY_POLICY&languageCode=en."},{"key":"ref_36","first-page":"148","article-title":"A comparison study of android mobile forensics for retrieving files system","volume":"13","author":"Foo","year":"2019","journal-title":"Int. J. Comput. Sci. Secur. (IJCSS)"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Roy, N.R., Khanna, A.K., and Aneja, L. (2016, January 29\u201330). Android phone forensic: Tools and techniques. Proceedings of the 2016 International Conference on Computing, Communication and Automation (ICCCA), Greater Noida, India.","DOI":"10.1109\/CCAA.2016.7813792"},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"173359","DOI":"10.1109\/ACCESS.2020.3014615","article-title":"A review of mobile forensic investigation process models","volume":"8","author":"Ikuesan","year":"2020","journal-title":"IEEE Access"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Bays, J., and Karabiyik, U. (May, January 29). Forensic analysis of third party location applications in android and ios. Proceedings of the IEEE INFOCOM 2019-IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), Paris, France.","DOI":"10.1109\/INFOCOMWKSHPS47286.2019.9093781"},{"key":"ref_40","unstructured":"Alghafli, K.A., Jones, A., and Martin, T.A. (2012, January 10\u201312). Forensics data acquisition methods for mobile phones. Proceedings of the 2012 In-ternational Conference for Internet Technology and Secured Transactions, London, UK."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Morrissey, S., and Campbell, T. (2011). iOS Forensic Analysis: For iPhone, iPad, and iPod Touch, Apress.","DOI":"10.1007\/978-1-4302-3343-5"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"S1","DOI":"10.1016\/j.diin.2017.01.011","article-title":"Improving the reliability of chip-off forensic analysis of NAND flash memory devices","volume":"20","author":"Fukami","year":"2017","journal-title":"Digit. Investig."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1109\/MSP.2017.4251114","article-title":"NAND flash memory forensic analysis and the growing challenge of bit errors","volume":"15","author":"Fukami","year":"2017","journal-title":"IEEE Secur. Priv."},{"key":"ref_44","unstructured":"(2022, September 12). u\/Krzys_CCE. ATA Password on a Hard Drive. Available online: https:\/\/www.reddit.com\/r\/datarecovery\/comments\/hg4njd\/ata_password_on_a_hard_drive\/."},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1109\/MCE.2016.2590238","article-title":"The Memory of Cars [The Art of Storage","volume":"5","author":"Coughlin","year":"2016","journal-title":"IEEE Consum. Electron. Mag."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"16093","DOI":"10.1007\/s11042-019-7199-y","article-title":"ExtSFR: Scalable file recovery framework based on an Ext file system","volume":"79","author":"Lee","year":"2020","journal-title":"Multimed. Tools Appl."},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1007\/s11227-014-1282-y","article-title":"Improved deleted file recovery technique for Ext2\/3 filesystem","volume":"70","author":"Lee","year":"2014","journal-title":"J. Supercomput."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/19\/7196\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T00:37:28Z","timestamp":1760143048000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/19\/7196"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9,22]]},"references-count":47,"journal-issue":{"issue":"19","published-online":{"date-parts":[[2022,10]]}},"alternative-id":["s22197196"],"URL":"https:\/\/doi.org\/10.3390\/s22197196","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,9,22]]}}}