TY - JOUR
T1 - Forensic Analysis of WhatsApp Disappearing Message on Unrooted Android Using Mobile Device Forensics Methodology NIST SP 800-101r1
AU - Sudiana, Dodi
AU - Nuruddin, Chandra Halim
AU - Rizkinia, Mia
AU - Husna, Diyanatul
N1 - Publisher Copyright:
© 2024 Joint Journal of Novel Carbon Resource Sciences and Green Asia Strategy. All rights reserved.
PY - 2024/3
Y1 - 2024/3
N2 - Digital forensics has a pivotal role in advancing Sustainable Development Goals (SDGs) by enhancing accountability, ensuring digital security, and contributing to environmental sustainability. Digital forensics facilitates investigations for justice, strengthens cybersecurity for resilient infrastructure, and supports environmental sustainability by analyzing data and investigating environmental crimes. WhatsApp's disappearing messages feature, which enables messages to disappear after a user-defined duration, poses new challenges in digital forensics. Criminals can potentially abuse this feature to eliminate message evidence. This research proposes a novel approach to obtaining digital evidence from WhatsApp's disappearing messages using the NIST SP 800-101r1 method. Six scenarios are simulated: forwarded messages, quoted messages, media messages, offline recipients, call history, and unread messages. Forensic analysis of six scenarios from 11–14 June 2023 reveals that 83.33% of disappeared messages could be recovered from backup files and notification logs, while the rest could not be recovered due to missing backup files.
AB - Digital forensics has a pivotal role in advancing Sustainable Development Goals (SDGs) by enhancing accountability, ensuring digital security, and contributing to environmental sustainability. Digital forensics facilitates investigations for justice, strengthens cybersecurity for resilient infrastructure, and supports environmental sustainability by analyzing data and investigating environmental crimes. WhatsApp's disappearing messages feature, which enables messages to disappear after a user-defined duration, poses new challenges in digital forensics. Criminals can potentially abuse this feature to eliminate message evidence. This research proposes a novel approach to obtaining digital evidence from WhatsApp's disappearing messages using the NIST SP 800-101r1 method. Six scenarios are simulated: forwarded messages, quoted messages, media messages, offline recipients, call history, and unread messages. Forensic analysis of six scenarios from 11–14 June 2023 reveals that 83.33% of disappeared messages could be recovered from backup files and notification logs, while the rest could not be recovered due to missing backup files.
KW - disappearing message
KW - forensic analysis
KW - NIST SP 800-101r1
KW - unrooted Android
KW - WhatsApp
UR - http://www.scopus.com/inward/record.url?scp=85189067335&partnerID=8YFLogxK
M3 - Article
AN - SCOPUS:85189067335
SN - 2189-0420
VL - 11
SP - 516
EP - 524
JO - Evergreen
JF - Evergreen
IS - 1
ER -