Java Serialization

Java Serialization is a popular technique for storing object states in the Java programming language. In the field of mobile forensics, we come across such artefacts. App developers very often resort to this technique to make their application state persistent. Serialization is also used when transferring data over a network between two Java applications using Remote Method Invocation(RMI). In the past, there have been recurring security issues associated with this technology. Despite its importance for forensic casework, one can hardly find any literature on this topic. In this chapter, we give an insight into the binary format. For this purpose, special features of the format are presented using an example. In addition to the actual protocol structure, basic steps for acquiring such data and analyzing it will be discussed. Practical hints for searching serials are given. Finally, the security issues are addressed.

Authors and Affiliations

1. University of Applied Sciences (Hochschule Mittweida), Technikumplatz 17, 09648, Mittweida, Germany

   Dirk Pawlaszczyk

Corresponding author

Correspondence to Dirk Pawlaszczyk .

Editors and Affiliations

1. Agentur für Innovation in der Cybersicherheit, Halle (Saale), Germany

   Christian Hummert

2. Fachgruppe Informatik, Hochschule Mittweida, Mittweida, Germany

   Dirk Pawlaszczyk

Open Access This chapter is licensed under the terms of the Creative Commons Attribution 4.0 International License (http://creativecommons.org/licenses/by/4.0/), which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license and indicate if changes were made.

The images or other third party material in this chapter are included in the chapter's Creative Commons license, unless indicated otherwise in a credit line to the material. If material is not included in the chapter's Creative Commons license and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder.

Reprints and permissions

© 2022 The Author(s)

Policies and ethics