The Forensic Analysis of WeChat Message

摘要：

　　WeChat is a popular instant messaging application on Android,iPhone and BlackBerry smart phones,whose chat messages are all stored in local installation folder.This paper studied the data forensic techniques of WeChat messages including the identification of storage location,storage structure and information extraction methods.Since the text message is stored in encrypted SQLite database,we detailedly analyze its cryptographic algorithm,key derivation principle and present the corresponding database decryption process in different practical forensic circumstances.In addition,we exploit the data recovery of voice and deleted messages which would also be helpful in data forensic for criminal investigation.

关键词： WeChat database decryption key derivation data forensics

作者: Lijun Zhang Fei Yu Qingbing Ji

作者单位: Science and Technology on Communication Security Laboratory,Chengdu, 610041, China

会议类型: 国际会议

会议名称: 2016 Sixth International Conference on Instrumentation and Measurement,Computer,Communication and Control (IMCCC2016)(第六届仪器测量、计算机通信与控制国际会议)

会议地点: 哈尔滨

会议语种:英文

页码: 500-503

在线出版日期: 2016-07-21（万方平台首次上网日期，不代表论文的发表时间）