A method for extracting behavior and location data in googleplay of Android system

Abstract

Provided is a method for extracting behavioral data and location data in GooglePlay of an Android system. The method includes the following steps of 1, copying a herrevad database in an application file; 2, newly constructing an extraction parsing model of the GooglePlay application; 3, opening and reading the herrevad database; 4, extracting base-station data of a lru_table data table; 5, extracting wifi data and base-station data of a local_reports data table; 6, acquiring behavioral data of a base station and behavioral data of a WIFI network, wherein the base station and the WIFI network are used by the application; 7, calling a base-station location parsing port and a WIFI location parsing port to acquire the location data. The method for extracting the behavioral data and location data in the GooglePlay of the Android system has the advantages that data of a db database in the application is analyzed, and data types are stable so that the location data in the application can be extracted more accurately; multiple data tables in a data file are associated, extracted and analyzed, and the networking usage condition and location data of equipment are completely restored; the type of the base station used by the GooglePlay application can be accurately analyzed and extracted; through acquired WIFI router MAC, more positioning data is obtained, and on the basis of base-station positioning and GPS positioning, evidence-obtaining methods of the location data are more abundant.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for extracting behavior and location data in the Android system Google Play. Background technique [0002] A smart phone has an independent operating system and an independent operating space. Mobile phone data information involving the communication and action records of criminal suspects can be used as a type of electronic evidence; [0003] In electronic forensics, it is particularly important to extract location data from mobile devices. However, the extraction of location data in the past only analyzes the configuration files (xml format files) of each application in the mobile phone, which is easier to obtain than other file formats. location data. The following summarizes the inadequacy of conventional extraction of location data from mobile devices: [0004] 1. The xml file in the application is easy to change when it is updated and upgraded, and ...

AI Technical Summary

Problems solved by technology

[0004] 1. The xml file in the application is easy to change when it is updated and upgraded. The location data extracted by conventional methods may not be extracted when the version is different.

[0005] 2. The behavior data associated with the file with location data is not extracted

[0006] 3. The positioning type of location data has not been judged and analyzed

Images