Grandft App:车辆助理应用程序数字法证 (Grand Theft App: Digital Forensics of Vehicle Assistant Apps)

from arxiv, This is the extended version of the Short Paper Grand Theft App: Digital Forensics of Vehicle Assistant Apps published at the 16th International Conference on Availability, Reliability and Security (ARES 2021)

Due to the increasing connectivity of modern vehicles, collected data is no longer only stored in the vehicle itself but also transmitted to car manufacturers and vehicle assistant apps. This development opens up new possibilities for digital forensics in criminal investigations involving modern vehicles. This paper deals with the digital forensic analysis of vehicle assistant apps of eight car manufacturers. We reconstruct the driver's activities based on the data stored on the smartphones and in the manufacturer's backend. For this purpose, data of the Android and iOS apps of the car manufacturers Audi, BMW, Ford, Mercedes, Opel, Seat, Tesla, and Volkswagen were extracted from the smartphone and examined using digital forensic methods in accordance with lawful government-approved forensics guidelines. Additionally, manufacturer data was retrieved using Subject Access Requests. Using the extensive data gathered, we successfully reconstruct trips and refueling processes, determine parking positions and duration, and track the locking and unlocking of the vehicle. These findings show that the digital forensic investigation of smartphone applications is a useful addition to vehicle forensics and should therefore be taken into account in the strategic preparation of future digital forensic investigations.

翻译：由于现代车辆的连通性不断增强,所收集的数据不再仅仅储存在车辆本身,而且还传送给汽车制造商和车辆助理应用程序。这一发展为在涉及现代车辆的刑事调查中进行数字法医提供了新的可能性。本文件涉及对8个汽车制造商的车辆助理应用程序进行数字法医分析。我们根据在智能手机和制造商后端储存的数据,对司机的活动进行了重建。为此目的,汽车制造商Audi、BMW、Ford、Mercedes、Opel、Seet、Tesla和Volkswagen的Android和iOS应用程序的数据从智能手机中提取,并使用政府核准的合法法医准则进行检查。此外,制造商数据是使用“存取请求”检索的。我们利用收集的广泛数据,成功地重建旅行和加油流程,确定停车位置和期限,并跟踪车辆的锁定和解锁。这些调查结果表明,对智能手机应用程序进行的数字法医调查是对车辆法证的有益补充,因此,今后在进行数字法医调查的战略准备时应考虑到。

相关内容