The Forensic Investigation of Android Private Browsing Sessions Using Orweb

Document Type

Conference Proceeding

Publication Date


Subject: LCSH

Computer crimes--Investigation, Internet, Computer security


Computer Engineering | Computer Sciences | Electrical and Computer Engineering | Forensic Science and Technology | Information Security


The continued increase in the usage of Small Scale Digital Devices (SSDDs) to browse the web has made mobile devices a rich potential for digital evidence. Issues may arise when suspects attempt to hide their browsing habits using applications like Orweb - which intends to anonymize network traffic as well as ensure that no browsing history is saved on the device. In this work, the researchers conducted experiments to examine if digital evidence could be reconstructed when the Orweb browser is used as a tool to hide web browsing activates on an Android smartphone. Examinations were performed on both a non-rooted and a rooted Samsung Galaxy S2 smartphone running Android 2.3.3. The results show that without rooting the device, no private web browsing traces through Orweb were found. However, after rooting the device, the researchers were able to locate Orweb browser history, and important corroborative digital evidence was found.


Purchase this paper here.

Purchase full proceeding here.

Dr. Baggili was appointed to the University of New Haven's Elder Family Endowed Chair in 2015.



Publisher Citation

Barghouthy, N. A., Marrington, A., & Baggili, I. (2013, March). The forensic investigation of android private browsing sessions using orweb. In Computer Science and Information Technology (CSIT), 2013 5th International Conference on (pp. 33-37). ISBN: 978-1-4799-2460-8