Publication
Post-mortem digital forensics analysis of the Zepp Life android application
| dc.contributor.author | Domingues, Patricio | |
| dc.contributor.author | Francisco, José | |
| dc.contributor.author | Frade, Miguel | |
| dc.date.accessioned | 2023-05-25T10:13:30Z | |
| dc.date.available | 2023-05-25T10:13:30Z | |
| dc.date.issued | 2023-05-12 | |
| dc.description | CIIC partially supported this research under the project UIDB 04524/2020 by FCT/MCTES and EU funds under the project UIDB/EEA 50008/2020. | pt_PT |
| dc.description.abstract | This paper studies the post-mortem digital forensic artifacts left by the Android Zepp Life (formerly Mi Fit) mobile application when used in conjunction with a Xiaomi Mi Band 6. The Mi Band 6 is a low-cost smart band device with several sensors that allow for health and activity monitoring, collecting metrics such as heart rate, blood oxygen saturation level, and step count. The device communicates via Bluetooth Low Energy with the Zepp Life application, which displays its data, provides some controls, and acts as a bridge to the Internet. We study, from a digital forensics perspective, the Android version of the mobile application in a rooted smartphone. For this purpose, we analyze the data repositories, namely its databases and XML files, and correlate the data on the smartphone with the corresponding usage of the Mi Band device. The paper also presents two open-source scripts we have developed to ease the task of forensic practitioners dealing with Zepp Life/Mi Band 6: ZL_std and ZL_autopsy. The former refers to a Python 3 script that extracts high-level views of Zepp Life data through the command-line, whereas the latter is a module that integrates ZL_std functionalities within the popular open-source Autopsy digital forensic software. Data stored on the Android companion device of a Mi Band 6 might include GPS coordinates, events and alarms, and biometric data such as heart rate, sleep time, and fitness activity, which can be valuable digital forensic artifacts. | pt_PT |
| dc.description.version | info:eu-repo/semantics/publishedVersion | pt_PT |
| dc.identifier.citation | Patrício Domingues, José Francisco, Miguel Frade, "Post-mortem digital forensics analysis of the Zepp Life android application", Forensic Science International: Digital Investigation, Volume 45, 2023, 301555, ISSN 2666-2817, https://doi.org/10.1016/j.fsidi.2023.301555. | pt_PT |
| dc.identifier.doi | https://doi.org/10.1016/j.fsidi.2023.301555 | pt_PT |
| dc.identifier.eissn | 2666-2817 | |
| dc.identifier.uri | http://hdl.handle.net/10400.8/8516 | |
| dc.language.iso | eng | pt_PT |
| dc.peerreviewed | yes | pt_PT |
| dc.publisher | Elsevier | pt_PT |
| dc.relation | UIDB 04524/2020 | pt_PT |
| dc.relation | UIDB/EEA 50008/2020 | pt_PT |
| dc.relation.publisherversion | https://www.sciencedirect.com/science/article/pii/S2666281723000641 | pt_PT |
| dc.rights.uri | http://creativecommons.org/licenses/by/4.0/ | pt_PT |
| dc.subject | Digital forensics | pt_PT |
| dc.subject | Mi band | pt_PT |
| dc.subject | Fitness trackers | pt_PT |
| dc.subject | Android | pt_PT |
| dc.subject | Wearable | pt_PT |
| dc.title | Post-mortem digital forensics analysis of the Zepp Life android application | pt_PT |
| dc.type | journal article | |
| dspace.entity.type | Publication | |
| oaire.citation.startPage | 301555 | pt_PT |
| oaire.citation.title | Forensic Science International: Digital Investigation | pt_PT |
| oaire.citation.volume | 45 | pt_PT |
| person.familyName | Domingues | |
| person.familyName | Frade | |
| person.givenName | Patrício | |
| person.givenName | Miguel | |
| person.identifier | 1234758 | |
| person.identifier.ciencia-id | AA15-6185-C477 | |
| person.identifier.ciencia-id | A512-9B28-1CEC | |
| person.identifier.orcid | 0000-0002-6207-6292 | |
| person.identifier.orcid | 0000-0002-4405-7696 | |
| person.identifier.scopus-author-id | 13411315400 | |
| person.identifier.scopus-author-id | 24468034000 | |
| rcaap.rights | openAccess | pt_PT |
| rcaap.type | article | pt_PT |
| relation.isAuthorOfPublication | b88ada5f-0d8b-4e55-ab0a-62aa82ea1388 | |
| relation.isAuthorOfPublication | 95a3fa7a-d37e-45e9-9acb-44c083582fea | |
| relation.isAuthorOfPublication.latestForDiscovery | b88ada5f-0d8b-4e55-ab0a-62aa82ea1388 |