Extraction of Common Concepts for the Mobile Forensics Domain Abdulalem Ali (&) , Shukor Abd Razak, Siti Hajar Othman, and Arafat Mohammed Department of Computer Science, Faculty of Computing, Universiti Teknologi Malaysia, Skudai, Johor, Malaysia almaldolah2012@gmail.com, sabdrazak@gmail.com, arafataldoqm@gmail.com, hajar@utm.my Abstract. With the rapid development of technology, mobile devices have become an essential tool in terms of crime fighting and criminal investigation. However, many mobile forensics investigators face dif ficulties with the forensics investigation process in their domain. The dif ficulties are due to the heavy reliance of the forensics field on knowledge as a valuable resource, a resource that is scattered and widely dispersed. Wide dispersion of mobile forensics knowledge not only makes investigation dif ficult for new investigators, resulting in substantial waste of time, but also leads to confusion in concepts and ter- minologies of mobile forensics domain. This paper proposes a common concept for the mobile forensics domain based on the concepts extraction process. The proposed concepts contribute to simplifying the investigation process and enables investigation teams to capture and reuse specialized forensic knowledge, thereby reducing the conceptual and terminological confusion in the mobile forensics domain. Keywords: Concept extraction Á Mobile forensics Á Digital forensics 1 Introduction Mobile device forensics is considered a new arena compared to the other digital forensics fields, such as computer and network forensics. According to Jansen and Ayers [1], Mobile Forensics (MF) is “a branch of digital forensics relating to the recovery of digital evidence from a mobile device under forensically sound condi- tions”. Many activities used by this device include checking emails, taking photos, surfing the Internet, business banking, use of GPS etc. On the other hand, digital crimes through the use of mobile devices are on the rise as well as cybercrime itself moving to mobile devices. According to the National Institute of Justice [2], many digital crimes are committed annually through mobile devices because of the proliferation of these devices in our society. For example, committing fraud via email, harassment through text messages, distribution of child pornography and traf ficking drugs etc. increasingly occur on mobile devices. MF has many interacting elements such as people, authority, investigation teams, resources, procedures, policy etc. and needs fusion of these ele- ments in order to keep apace of digital crimes. © Springer International Publishing AG 2018 F. Saeed et al. (eds.), Recent Trends in Information and Communication Technology, Lecture Notes on Data Engineering and Communications Technologies 5, DOI 10.1007/978-3-319-59427-9_16