Guía de procedimientos para el manejo de incidentes en dispositivos móviles mediante análisis forense.

Abstract

This research is to propose a guide of procedures for incident management in mobile devices using forensics analysis, applied to cell phones confiscated in Riobamba to people engaged in the buying and selling these devices. The methodology used to obtain evidence digital cellular devices under the Symbian, Android platform version 2.3.4/2.3.6, and Sony Ericsson proprietary operating system, which could be related to an incident as: loss or theft of the mobile device, fraud or extortion, is based on the scientific and inductive method, it was investigated the concepts, tools and procedures for computer forensics, experiments were conducted on 50 mobile devices, Nokia, Samsung, LG, Sony Ericsson, the use of these methods allowed to build procedures guide comprising four phases: problem identification, digital evidence collection, forensic analysis of the retrieved information, creation of a report. Chi - square statistical technique was applied to check the obtaining of digital evidence, getting a value of 21.04. Recovered: text messages in a 75%, 60% of phone calls, it has been able to generate 60% of reports, images, phonebook, digital evidence that can be used in a court of law, in the event of a legal pr ocess. With the obtained results it is concluded that the proposed procedures guide helps to get information from cell phones. It is recommended to properly use the public security policies on mobile devices to avoid theft, fraud and extortion.