A Methodology for Privacy-Aware IoT-Forensics

Published 1 August 2017

Ana Nieto, Rubén Rı́os, Javier López

DOI10.1109/trustcom/bigdatase/icess.2017.293

Citations59

TL;DR

A new model for IoT-forensics that takes privacy into consideration is proposed by incorporating the requirements of ISO/IEC 29100:2011 throughout the investigation life cycle to lay the groundwork for the voluntary cooperation of individuals in cyber crime investigations.

Abstract

The Internet of Things (IoT) brings new challenges to digital forensics. Given the number and heterogeneity of devices in such scenarios, it bring extremely difficult to carry out investigations without the cooperation of individuals. Even if they are not directly involved in the offense, their devices can yield digital evidence that might provide useful clarification in an investigation. However, when providing such evidence they may leak sensitive personal information. This paper proposes PRoFIT; a new model for IoT-forensics that takes privacy into consideration by incorporating the requirements of ISO/IEC 29100:2011 throughout the investigation life cycle. PRoFIT is intended to lay the groundwork for the voluntary cooperation of individuals in cyber crime investigations.

Keywords

Computer Science

Internet of Things Forensics: Challenges and Approaches

184 Citations2013Edewede Oriwoh, David Jazani +2 more

The scope of this paper is two-fold: firstly it proposes the application of a 1-2-3 Zones approach to Internet of Things (IoT)-related Digital Forensics (DF) investigations, and introduces a Next-Best-Thing Triage (NBT) Model for use in conjunction with the 1- 2-3Zones approach where necessary.

IEEE Communications Surveys & TutorialsSmartphone Malware and Its Propagation Modeling: A Survey

173 Citations2013Sancheng Peng, Shui Yu +1 more

In order to understand the propagation behavior of smartphone malware, generic epidemic models are recalled as a foundation for further exploration and the smartphone malware propagation models are extensively surveyed.

A Generic Digital Forensic Investigation Framework for Internet of Things (IoT)

172 Citations2016Victor R. Kebande, Indrakshi Ray

It is the authors' opinion that if the proposed framework is successfully incorporated in future DF tool development, it will facilitate effective digital forensic crime investigation for IoT infrastructures.

FAIoT: Towards Building a Forensics Aware Eco System for the Internet of Things

162 Citations2015Shams Zawoad, Ragib Hasan

A Forensics-aware IoT (FAIoT) model is proposed for supporting reliable forensics investigations in the IoT environment and the first working definition of IoT forensics is proposed.

Computer Fraud & SecurityDigital forensics: the missing piece of the Internet of Things promise

116 Citations2016Steve Watson, Ali Dehghantanha

The issues and the importance of further development in digital forensics of Internet of things technologies are discussed, and how forensics practitioners, device manufacturers and legal authorities could share their efforts and minimise this gap are elaborate.

View PDF

Internet of Things(IoT) digital forensic investigation model: Top-down forensic approach methodology

111 Citations2015Sundresan Perumal, Norita Md Norwawi +1 more

The aim of this paper is to identify the best approach by designing a novel model to conduct the investigation situations for digital forensic professionals and experts based on triage model and 1-2-3 zone model for volatile based data preservation.

The Forensics Edge Management System: A Concept and Design

83 Citations2013Edewede Oriwoh, Paul Sant

The FEMS design aims to meet requirements for autonomy and independence, it is a system that can be integrated into a home-IoT network to conduct preliminary forensic investigations and to provide basic security services.

IEEE NetworkDigital Witness: Safeguarding Digital Evidence by Using Secure Architectures in Personal Devices

62 Citations2016Ana Nieto, Rodrigo Román +1 more

This article introduces this novel concept of digital witnesses, providing a preliminary analysis on the management of digital evidence and the technologies that can be used to implement it with security guarantees in IoT environments, and the basic building blocks of a digital witness are defined.

Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications EngineeringA Review and Comparative Study of Digital Forensic Investigation Models

27 Citations2013Kwaku Kyei, Pavol Zavarsky +2 more

The techno-legal nature of this proposed model coupled with the incorporation of best practices of existing models makes it unique, but iterative in nature helping in successful investigation and prosecution.

Communications of the ACMIn privacy law, it's the U.S. vs. the world

14 Citations2016Tom Geller