Abstract:

As one of popular instant messaging applications on smart phone, mobile QQ contains many kinds of user data which even includes the information of evidence, so forensic analysis for mobile QQ is significant. Firstly, this paper introduces the basic information of Android and mobile QQ, and the research status of forensic model and social network instant messaging application on smart phone. Then, referring to traditional digital forensic models and features of Android mobile intelligent device and mobile QQ, this paper comes up with an analysis model of QQ forensic in Android system, and introduces the detail and output at nine phases. Finally, according to three evaluation parameters as follows: ability of data acquisition, ability of data trustworthiness evaluation and ability of machine readable analysis result, the paper compares the prototype based on analysis model with two typical commercial digital forensic software, and the comparative result shows that the analysis model has a couple of advantages in QQ forensic analysis in Android system.

Key words: Android, mobile QQ, forensic, analysis model