Title: Manual Analysis Phase for (PIFPM): Platform Independent Forensics Process Model for Smartphones

Issue Number: Vol. 6, No. 3
Year of Publication: Sep - 2017
Page Numbers: 101-108
Authors: F. Chevonne Thomas Dancer
Journal Name: International Journal of Cyber-Security and Digital Forensics (IJCSDF)
- Hong Kong
DOI:  http://dx.doi.org/10.17781/P002274


In this paper, the Apple iPhone, HTC Aria, and HTC TouchPro 6850 was used in an effort to generate the average change in file content by device while applying XRYv6.1 and DiffMerge in Experiment 2. XRY writes the data in the form of files at the root of the folder to determine the manual analysis phase for smartphones. RIM (Blackberry 7105, Blackberry 8530, and Blackberry 8703e) and Symbian Nokia 5230 Nuron were used to analyze data that averages the percent of change by category in Experiment 1, along with Apple iPhone, HTC Aria, and HTC TouchPro 6850. The manual analysis of smartphones can be obtained by comparing Experiment 1 with Experiment 2 to show what was altered and what did not change. Apple iPhone 3G A1242 has the greatest change of all the smartphones. Both the HTC TouchPro 6850 and HTC Aria have the same order in Experiment 1 as in the final order and the RIM OS' order is the same as well. The Nokia Nuron 5320 is not supported by XRYv.6.1 for MMS and Picture categories, but the final order was the same as Experiment 2; SMS, Contact, Picture, MMS.