When we use an application on Android, cache data is generated. This can be an important clue to the investigation and needs analysis. However, the present analysis is performed without understanding the generation principle of various cache artifacts, such as purpose and structure, and the data obtained through this simple analysis is used only indirectly for investigation because of lack of information. Therefore, in this paper, we expect to improve the usability of cache by analyzing the type, meaning, and structure of the cache that is stored when the application is used and suggesting an analysis method according to each cache.
ACKNOWLEDGMENT This research was supported by the MSIT(Ministry of Science and ICT), Korea, under the ITRC(Information Technology Research Center) support program (IITP-2018-2016-0-00304) supervised by the IITP(Institute for Information & communications Technology Promotion) and was supported by Institute for Information & communications Technology Promotion(IITP) grant funded by the Korea government(MSIT) (No.2018-0-01000, Development of Digital Forensic Integration Platform) and was supported by BK21 Plus project of the National Research Foundation of Korea Grant.
