You can run but you cannot hide from memory: Extracting IM evidence of Android apps.

Antonia Nisioti, Alexios Mylonas, Vasilios Katos, Paul D. Yoo, Anargyros Chryssanthou

Browse the full ISCC paper archive.