Forensic analysis of open-source XMPP/Jabber multi-client instant messaging apps on Android smartphones - SN Applied Sciences
link.springer.com
In the quest for a panacea to ensure digital privacy, many users have switched to using decentralized open-source Extensible Messaging and Presence Protocol multi-client instant messaging (IM) apps for secure end-to-end communication. In this paper, we present a forensic analysis of the artefacts generated on Android smartphones by Conversations and Xabber apps. We identified databases maintained by each app and external Secure Digital card directories that store local copies of user metadata. We analysed each app’s storage locations for forensic artefacts and how they can be used in a forensic investigation. The results in this paper show a detailed analysis of forensic files of interest which can be correlated to identify the local user’s multiple IM accounts and contact list, contents of messages exchanged with contacts, deleted files, time, and dates in the order of their occurrence. The contributions of this research include a comprehensive description of artefacts, which are of forensic interest, for each app analysed.
  • Lynda
    4·
    3 years ago

    This is a good article. A lot of other apps have the same problem. I think it is important that apps have a security threat matrix.

    Many people don’t realize what is really private, and what isn’t. As in a phone conversation, it isn’t known what you are talking about, but who you are talking with is known. Is that the full definition of privacy? No. People also don’t full understand how metadata can be collected and used. Many people don’t understand the risk of a server being hacked. If a server can be blocked/censored, I would imagine a server be spoofed is plausible too.

    Many people hear “secure” or E2EE. But they do not realize that applies to the transmission of your message. That doesn’t mean it is stored on your device encrypted and secure, nor does it mean stored on someone’s else device is encrypted and secure. Some say it isn’t necessary because if your device is compromised, then so would any app security. But I doubt those same people leave their password database unencrypted.

    • CHEF-KOCHOP
      2·
      3 years ago

      Most people do not want privacy, they want fully anonymity. They mix these things.