Mobile Forensics for E-wallet Artifact in Mobile Device: Case Study in Palestine رسالة ماجستير

Abstract

Given the rising use of electronic wallets for financial transactions and their potential misuse in illicit activities (e.g., money laundering, extortion, and tax evasion), the challenge lies in tracking and regulating these transactions due to their global and relatively anonymous nature. This prompts the inquiry into the feasibility of identifying electronic wallet presence and usage on mobile devices, particularly in digital forensics and security. This study presents a framework for validating e-wallet artifacts in mobile forensics. The framework comprises three phases: data collection, feature selection, and validation. Using e-wallet artifacts from an Intrusion Detection System, we assess their validity through stochastic modeling. Furthermore, after repeatedly acquiring data when deleting the application from the phone, it was revealed that it retains all user movements and information. This is unacceptable in cybersecurity as it facilitates embezzlement and the transfer of illicit funds. The research employs both deductive (questionnaire) and inductive (forensic analysis) approaches. The statistical analysis results for a sample of 70 users of electronic wallets in Palestine have shown that local e-wallets demonstrate an acceptable level of security. We recommend Implementing a robust strategy to counter electronic wallet threats and enhance their competitiveness on the global stage and adopting the model proposed in this research when establishing electronic wallet systems. vii Results indicate that the Reflect NeoBank application is not adequately secure. It retains user data even after deletion, posing cybersecurity risks, including embezzlement and illicit fund transfers. We also compare local and global electronic wallets, highlighting security disparities. This research will contribute to the knowledge recommending future research topics and methods in which digital forensic examiners might apply the findings to instances involving local e-wallet use on mobile devices or any illicit e-wallet transactions.