Forensic analysis and security assessment of Android m-banking apps

Abstract

The increasing popularity and constant evolution of mobile technologies have resulted in an increased focus in mobile device and app security and forensics research. Banking apps appear to be an understudied topic, despite their popularity with consumers. In this paper, seven Android m-banking apps in Thailand are analysed. Based on the findings of our study, we describe the forensic artefacts that could be forensically recovered from the apps, and the findings of security assessment of the apps. For example, we found that several of the apps do not implement root device detection, do not encrypt user data, or it is possible to modify the apps and install repackaged apps.

Keywords:

• Android app forensics
• physical acquisition process
• Android app code analysis
• Android app repackaging