# Forensics Analysis of Android Mobile VoIP Apps

**Authors:** Tooska Dargahi, Ali Dehghantanha, Mauro Conti  
**arXiv:** [1709.05296](https://arxiv.org/abs/1709.05296)  
**Date:** 2017-09-15  
**Summary page:** https://www.summarizepaper.com/en/paper/1709.05296v1/

## Key points

- VoIP applications like Viber, Skype, and WhatsApp are popular for their convenience and cost-effectiveness in digital communication.
- Concerns about privacy and security arise due to the vast amount of personal information shared through these apps.
- Understanding the forensic implications of using VoIP apps is crucial to address privacy and security issues.
- A study by Dargahi, Dehghantanha, and Conti analyzed Mobile VoIP (mVoIP) apps like Viber, Skype, and WhatsApp Messenger for forensically valuable remnants on smartphone devices.
- The study revealed that various data types such as messages, contact details, images, and video files could be extracted from smartphones running these mVoIP apps.
- Previous research emphasized analyzing mobile applications for forensic purposes to uncover useful data like text messages, multimedia content, email communications, web browsing activities, registry entries, contact lists, conversation logs, transferred files.
- Continuous research efforts are needed to enhance forensic techniques for mobile communication platforms.

## Summary

In the realm of digital communication, Voice over Internet Protocol (VoIP) applications have become increasingly popular due to their convenience and cost-effectiveness. However, the widespread use of these apps raises concerns about privacy and security, as users share a vast amount of personal and sensitive information through them. To address these issues, it is crucial to have a comprehensive understanding of the forensic implications of using such apps. In a recent study by Dargahi, Dehghantanha, and Conti, an in-depth analysis was conducted on three prominent Mobile VoIP (mVoIP) apps available on the Google Play store: Viber, Skype, and WhatsApp Messenger. The researchers aimed to uncover the extent to which these apps leave behind forensically valuable remnants on smartphone devices. Through meticulous investigative procedures, they were able to identify various artifacts that could be recovered from devices equipped with these mVoIP apps. The experimental results revealed that a wide range of data types, including messages, contact details, phone numbers, images, and video files, could be extracted from smartphones running these mVoIP apps. This discovery underscores the importance of conducting thorough forensic examinations to safeguard user privacy and investigate potential security breaches. Furthermore, previous studies highlighted the significance of analyzing mobile applications for forensic purposes. For instance, researchers identified potentially useful data such as text messages, multimedia content, email communications,
web browsing activities,
and registry entries stored on mobile devices. Additionally,
investigations into malicious monitoring software demonstrated how forensic analysts can detect suspicious activities on devices under scrutiny. Moreover,
research focusing on Windows instant messaging apps like Facebook and Skype showcased recoverable artifacts such as contact lists, conversations logs, and transferred files. These findings emphasize the need for continuous research efforts to enhance forensic techniques for mobile communication platforms. Overall, this comprehensive analysis sheds light on the intricate landscape of digital forensics in the context of mobile VoIP applications. By delving into the forensically valuable remnants left by popular mVoIP apps like Viber, Skype, and WhatsApp Messenger, researchers are paving the way for improved privacy protection and security measures in the ever-evolving realm of digital communication.