Forensic Artifacts of the ChatON Instant Messaging Application

Document Type

Conference Proceeding

Publication Date


Subject: LCSH

Online social networks, Instant messaging, Computer crimes--Investigation


Computer Engineering | Computer Sciences | Electrical and Computer Engineering | Forensic Science and Technology | Information Security


Instant Messaging (IM) is one of the most used types of applications across all digital devices, and is an especially popular feature on smartphones. This research is about the artifacts left by Samsung's ChatON IM application, which is a multi-platform IM application. In this work, we acquired forensic images of a Samsung Galaxy Note device running Android 4.1 and an iPhone running iOS 6. The acquired images were analyzed and the data relevant to the ChatON application were identified. This research resulted is a map of the digital evidence left by ChatON on these mobile devices which assists digital forensics practitioners and researchers in the process of locating and recovering digital evidence from ChatON.


Dr. Baggili was appointed to the University of New Haven's Elder Family Endowed Chair in 2015.

Paper may be purchased here.

Full proceedings may be purchased here.



Publisher Citation

Iqbal, A.; Marrington, A.; Baggili, I., "Forensic artifacts of the ChatON Instant Messaging application," in Systematic Approaches to Digital Forensic Engineering (SADFE), 2013 Eighth International Workshop on , vol., no., pp.1-6, 21-22 Nov. 2013 doi: 10.1109/SADFE.2013.6911538