It is currently 24-09-2017 15:05

Forensic application Retroscope retrieve all data from Whatsapp, Telegram, etc.

Forensic application Retroscope retrieve all data from Whatsapp, Telegram, etc.

by seo_worker » 2016-08-16 08:49:59



Researchers from the American universities of Purdue and New Orleans presented at the Usenix Security Symposium application Retroscope, which is called "the new paradigm in forensic science". Retroscope is able to retrieve from memory device to 11 the saved screens that will show, what exactly did the owner of the gadget in 15 different applications, including Signal, Skype, WeChat, Gmail, Facebook, WhatsApp, Telegram and so on.

The researchers said that was "amazed" by how unprotected the memory of the mobile apps. Although the user expects that information is destroyed immediately after it is displayed on the screen, in fact, it is not so. Ready to "cast screen" is stored in the memory so that the device can quickly return to a closed application that improves the performance.

At the conference Usenix Security Symposium, the group presented a report entitled "Screen after Previous Screens: Spatial-Temporal Recreation of the Android App Displays Images from Memory," and also demonstrated a proof-of-concept video, which shows how Retroscope may help in the work of law enforcement. Video Retroscope retrieves data from memory unlocked Android smartphone.

Retroscope works with fifteen different applications, including popular instant messengers, email and social networks. It can remove from memory from three to eleven latest screens for application data. Retroscope source code published on GitHub.
seo_worker
moderators
Сообщений: 744
Депозит: 0.005 BTC

Rating: 2