Forensic Acquisition and Analysis of Tango VoIP

Files in This Item:
File Description SizeFormat 
insight_publication.pdf477.36 kBAdobe PDFDownload
Title: Forensic Acquisition and Analysis of Tango VoIP
Authors: Le-Khac, Nhien-An
Sgaras, Christos
Kechadi, Tahar
Permanent link:
Date: 18-Jul-2014
Abstract: The advent of the Internet has significantly transformed the daily activities of millions of people, with one of them being the waypeople communicate where Instant Messaging (IM) and Voice over IP (VoIP) communications have become prevalent. AlthoughIM applications are ubiquitous communication tools nowadays, it was observed that the relevant research on the topic ofevidence collection from IM services was limited. The reason is an IM can serve as a very useful yet very dangerous platform forthe victim and the suspect to communicate. Indeed, the increased use of Instant Messengers on smart phones has turned to be thegoldmine for mobile and computer forensic experts. Traces and Evidence left by applications can be held on smart phones andretrieving those potential evidences with right forensic technique is strongly required. Recently, most research on IM forensicsfocus on applications such as WhatsApp, Viber and Skype. However, in the literature, there is no forensic analysis related toTango, an IM on both iOS and Android platforms, even though the total users of this application already exceeded 100 million.Therefore, in this paper we present forensic acquisition and analysis of Tango VoIP for both iOS and Android platforms. We tryto answer on how evidence can be collected when IM communications are used. We also define taxonomy of target artefacts inorder to guide and structure the subsequent forensic analysis. Additionally to the forensic analysis, alternative sources ofevidence were examined such as the possibility to clone an IM session and perform communication interception. Finally, areview of the information that can become available via the IM vendor was conducted. The achieved results of this researchprovided elaborative answers on the types of artefacts that can be identified by this IM application. We compare moreover theforensics analysis of Tango with two other popular IM: WhatApp and Viber.
Funding Details: Science Foundation Ireland
Type of material: Conference Publication
Keywords: Machine learningStatistics
Other versions:
Language: en
Status of Item: Peer reviewed
Conference Details: International Conference on Challenges in IT, Engineering and Technology (ICCIET 2014), Phuket, Thailand, 17-18 July 2014
Appears in Collections:Computer Science Research Collection
Insight Research Collection

Show full item record

Page view(s) 50

checked on May 25, 2018

Download(s) 5

checked on May 25, 2018

Google ScholarTM


This item is available under the Attribution-NonCommercial-NoDerivs 3.0 Ireland. No item may be reproduced for commercial purposes. For other possible restrictions on use please refer to the publisher's URL where this is made available, or to notes contained in the item itself. Other terms may apply.