Browse > Article
http://dx.doi.org/10.13089/JKIISC.2012.22.1.57

Carving deleted voice data in mobile  

Kim, Sang-Dae (Korea University, Graduate School of Information Management and Security)
Byun, Keun-Duck (Korea University, Graduate School of Information Management and Security)
Lee, Sang-Jin (Korea University, Graduate School of Information Management and Security)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.22, no.1, 2012 , pp. 57-65 More about this Journal
Abstract
People leave voicemails or record phone conversations in their daily cell phone use. Sometimes important voice data is deleted by the user accidently, or purposely to cover up criminal activity. In these cases, deleted voice data must be able to be recovered for forensics, since the voice data can be used as evidence in a criminal case. Because cell phones store data that is easily fragmented in flash memory, voice data recovery is very difficult. However, if there are identifiable patterns for the deleted voice data, we can recover a significant amount of it by researching images of it. There are several types of voice data, such as QCP, AMR, MP4, etc.. This study researches the data recovery solutions for EVRC codec and AMR codec in QCP file, Qualcumm's voice data format in cell phone.
Keywords
Mobile Data Carving; Digital Forensics;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Enhanced Variable Rate Codec, Speech Service Option 3 for Wideband Spread Spectrum Digital Systems, 3GPP2 C.S0-014-0, 3GPP2 Version 2.0, January 2010
2 Selectable Mode Vocoder (SMV) Service Option for Wideband Spread Spectrum Communication Systems, 3GPP2 C.S00-30-0, 3GPP2 Version 3.0, January 2004
3 Garbage Collection: http://en.wikipedia.org/wiki/Garbage_collection_(computer_science)
4 M.I.Cohen, "Advanced carving techniques", Digital Investigation Volume 4, Issues 3-4, pp 119-128, August 2007.   DOI
5 Mandatory Speech Codec speech processing functions; Adaptive Multi-Rate (AMR) speech codec; Transcoding functions, 3GPP TS 26.090, December, 2009.
6 M.I.Cohen, "Advanced Jpeg Carving", e-Forensics08: Proceedings of the 1st international conference on Forensic applications and techniques in telecom-munications, information, and multimedia and workshop, pp. 1-6 ICST(Institute for Computer Sciences Social-Informatics and Telecommunications Engineering), January 2008. ISBN 978-963-9799-19-6.