Detail publikace

WhatsApp network forensics: Decrypting and understanding the WhatsApp call signaling messages

KARPÍŠEK Filip, BAGGILI Ibrahim a BREITINGER Frank. WhatsApp network forensics: Decrypting and understanding the WhatsApp call signaling messages. Digital Investigation, roč. 2015, č. 15, s. 110-118. ISSN 1742-2876.
Název česky
Forenzní analýza WhatsApp: dešifrování a význam signálních zpráv
Typ
článek v časopise
Jazyk
angličtina
Autoři
Karpíšek Filip, Ing. (UIFS FIT VUT)
Baggili Ibrahim (University of New Haven)
Breitinger Frank (UniLi)
Abstrakt

WhatsApp is a widely adopted mobile messaging application with over 800 million users. Recently, a calling feature was
added to the application and no comprehensive digital forensic analysis has been performed with regards to this feature
at the time of writing this paper. In this work, we describe how we were able to decrypt the network trac and obtain
forensic artifacts that relate to this new calling feature which included the: a) WhatsApp phone numbers, b) Whats-
App server IPs, c) WhatsApp audio codec (Opus), d) WhatsApp call duration, and e) WhatsApp's call termination.
We explain the methods and tools used to decrypt the trac as well as thoroughly elaborate on our ndings with
respect to the WhatsApp signaling messages. Furthermore, we also provide the community with a tool that helps in the
visualization of the WhatsApp protocol messages.č

Rok
2015
Strany
110-118
Časopis
Digital Investigation, roč. 2015, č. 15, ISSN 1742-2876
Vydavatel
Elsevier Science
DOI
UT WoS
000366160500011
EID Scopus
BibTeX
@ARTICLE{FITPUB10979,
   author = "Filip Karp\'{i}\v{s}ek and Ibrahim Baggili and Frank Breitinger",
   title = "WhatsApp network forensics: Decrypting and understanding the WhatsApp call signaling messages",
   pages = "110--118",
   journal = "Digital Investigation",
   volume = 2015,
   number = 15,
   year = 2015,
   ISSN = "1742-2876",
   doi = "10.1016/j.diin.2015.09.002",
   language = "english",
   url = "https://www.fit.vut.cz/research/publication/10979"
}
Soubory
Nahoru