Iot Forensics: Challenges for the Ioa Era

Abstract

Abstract-Challenges for IoT-based forensic investigations include the increasing amount of objects of forensic interest, relevance of identified and collected devices, blurry network boundaries, and edgeless networks. As we look ahead to a world of expanding ubiquitous computing, the challenge of forensic processes such as data acquisition (logical and physical) and extraction and analysis of data grows in this space. Containing an IoT breach is increasingly challenging -evidence is no longer restricted to a PC or mobile device, but can be found in vehicles, RFID cards, and smart devices. Through the combination of cloud-native forensics with client-side forensics (forensics for companion devices), we can study and develop the connection to support practical digital investigations and tackle emerging challenges in digital forensics. With the IoT bringing investigative complexity, this enhances challenges for the Internet of Anything (IoA) era. IoA brings anything and everything "online" in a connectedness that generates an explosion of connected devices, from fridges, cars and drones, to smart swarms, smart grids and intelligent buildings. Research to identify methods for performing IoT-based digital forensic analysis is essential. The long-term goal is the development of digital forensic standards that can be used as part of overall IoT and IoA security and aid IoT-based investigations.

The Internet of Things: Challenges and Considerations for Cybercrime Investigations and Digital Forensics

“…Current models are criticised from different aspects, such as being too specific (Reith, M., Carr, C., & Gunsch, 2002), too broad (Rogers, 2006), or too complex (Selamat, S. R., Yusof, R., & Sahib, 2008). In contrast, "CFSAP" (Computer Forensics -Secure, Analyse, Present) comprises the four key elements of computer forensics (identification, preservation, analysis, and presentation) into three steps to follow: Secure (identify sources of digital evidence, preserve digital evidence), Analyse (forensic analysis of digital evidence: extract, process, interpret), Present (Presentation of digital evidence, expert opinion and testimony) (Macdermott et al, 2018). "Framework for Reliable Experimental Design" (FRED) proposed by Horsman, focuses on the underpinning procedures involved within undertaking the reverse engineering of digital data structures and the process of extracting and interpreting digital content in a reliable way.…”

“…In the infancy of computer forensics, cases were limited to the analysis of a single device; increasingly cases require the analysis of multiple devices followed by the correlation of the collected evidence. Issues identified within the study are still prominent now in 2018 (Horsman, 2018), and the rapid embrace of the IoT/IoA era enhances these concerns (Macdermott et al, 2018).…”

“…Previously, criminal investigations generally relied on the analysis of physical evidence, the study of the crime scene, speaking to and taking statements from witnesses, and interviews with suspects. Today, the criminal investigator must recognise that the evidence they have to analyse could be in an electronic or digital form (Macdermott, Baker, & Shi, 2018). The crime scene may comprise a computer system, smart and small-scale digital devices or network traffic/logs as opposed to the traditional 'physical' scene.…”

Advanced Digital Forensic IoT Based Secure Communication

“…In addition, the elimination of the proof form of these devices is also seen as another IoT concern as most vendors are facing distinctive levels, operating frames and phones. The CCTV forensic [12], in which CCTV producers are organized into their devices to connect the distinctive document framework. It is still a challenge to legally retrieve curiosities from the storage devices of CCTV.…”

IoT Forensics: Amazon Echo as a Use Case

“…mobile device forensics), the diversity in IoT devices (e.g. 3D printers, roadside units in a smart transportation system, smart healthcare devices in a hospital, and smart military uniforms) and the different evidence and privacy regulations compound the challenges of such investigations [12]. Some of these challenges are as follows:…”