How to cite this WIREs title:
WIREs Forensic Sci

The need for Internet of Things digital forensic black‐boxes

Opinion

Hyunji Chung, Kim‐Kwang Raymond Choo

Published Online: Jul 15 2020

DOI: 10.1002/wfs2.1385

Full article on Wiley Online Library: HTML PDF

Can't access this content? Tell your librarian.

Abstract In our interconnected cyber‐physical world, the types and number of Internet of Things (IoT) will also increase. Such devices are also generally capable of capturing a broad range of information, including digital artifacts that can facilitate a digital investigation during a cyber security incident (e.g., data breach). In other words, IoT devices are potential evidence acquisition sources. We posit the importance of having a digital forensic black‐box, conceptually similar to the cockpit voice recorder (also known as a flight recorder) on aircrafts, to facilitate digital investigations. Using a smart home comprising many different IoT devices (e.g., smart home devices, smart vehicles, and smart wearables) as an example, we discuss where such a black‐box can reside and what sort of artifacts can be collected. This black‐box can also complement other existing digital forensic readiness strategies, such as those described in ISO/IEC 27043:2015. We also explore the associated design requirements such as data provenance. There are changes required to the organization's current computing architecture in order to deploy our proposed black‐box, as explained in this paper. In addition, we will explore the potential privacy implications and potential research opportunities (e.g., blockchain‐based digital forensic black‐box). This article is categorized under: Digital and Multimedia Science > Cloud Forensics Digital and Multimedia Science > IoT Forensics

An example deployment of the digital forensic black‐box

[ Normal View | Magnified View ]

References

Ab Rahman,, N. H., Glisson,, W. B., Yang,, Y., & Choo,, K.‐K. R. (2016). Forensic‐by‐design framework for cyber‐physical cloud systems. IEEE Cloud Computing, 3(1), 50–59. https://doi.org/10.1109/MCC.2016.5
Alladi,, T., Chamola,, V., Sikdar,, B., & Choo,, K.‐K. R. (2020). Consumer IoT: Security vulnerability case studies and solutions. IEEE Consumer Electronics Magazine, 9(2), 17–25. https://doi.org/10.1109/MCE.2019.2953740
Chung,, H., Park,, J., & Lee,, S. (2017). Digital forensic approaches for Amazon Alexa ecosystem. Digital Investigation, 22(Supplement), S15–S25. https://doi.org/10.1016/j.diin.2017.06.010
Cole,, S. (2018). Apple health data is being used as evidence in a rape and murder investigation. Retrieved from https://www.vice.com/en_us/article/43q7qq/apple-health-data-is-being-used-as-evidence-in-a-rape-and-murder-investigation-germany
De La Torre Parra,, G., Rad,, P., & Choo,, K.‐K. R. (2019). Implementation of deep packet inspection in smart grids and industrial Internet of Things: Challenges and opportunities. Journal of Network and Computer Applications, 135, 32–46. https://doi.org/10.1016/j.jnca.2019.02.022
Do,, Q., Martini,, B., & Choo,, K.‐K. R. (2018). Cyber‐physical systems information gathering: A smart home case study. Computer Networks, 138, 1–12. https://doi.org/10.1016/j.comnet.2018.03.024
Goudbeek,, A., Choo,, K.‐K. R., Le‐Khac,, N.‐A. (2018). A forensic investigation framework for smart home environment. In Proceedings of the 17th IEEE International Conference on Trust, Security and Privacy in Computing and Communications/12th IEEE International Conference on Big Data Science and Engineering (TrustCom/BigDataSE 2018) (pp. 1446–1451). https://doi.org/10.1109/TrustCom/BigDataSE.2018.00201
Greenberg,, A. (2015). Hackers remotely kill a jeep on the highway—With me in it. Retrieved from https://www.wired.com/2015/07/hackers-remotely-kill-jeep-highway/
Gregorio,, J., Alarcos,, B., & Vicente,, A. G. (2019). Forensic analysis of nucleus RTOS on MTK smartwatches. Digital Investigation, 29, 55–66. https://doi.org/10.1016/j.diin.2019.03.007
Grispos,, G., Glisson,, W. B., & Choo,, K.‐K. R. (2017). Medical cyber‐physical systems development: A forensics‐driven approach. In Proceedings of Proceedings of the Second IEEE/ACM International Conference on Connected Health: Applications, Systems and Engineering Technologies (CHASE 2017) (pp. 108–113). New York, NY: ACM. https://doi.org/10.1109/CHASE.2017.68
Jerome,, S. (2017). Smart water meter data considered evidence in murder case. Retrieved from https://www.wateronline.com/doc/smart-water-meter-considered-evidence-murder-case-0001
Knox,, M. (2020). Judge: Fitbit evidence to remain part of Dabate case. Retrieved from https://www.journalinquirer.com/crime_and_courts/judge-fitbit-evidence-to-remain-part-of-dabate-case/article_29722fd0-41dc-11ea-9d17-f7e57dd3bc7b.html
Le‐Khac,, N.‐A., Jacobs,, D., Nijhoff,, J., Bertens,, K., & Choo,, K.‐K. R. (2020). Smart vehicle forensics: Challenges and case study. Future Generation Computer Systems, 109, 500–510. https://doi.org/10.1016/j.future.2018.05.081
Orr,, D. A., & Sanchez,, L. (2018). Alexa, did you get that? Determining the evidentiary value of data stored by the Amazon® Echo. Digital Investigation, 24(3), 72–78. https://doi.org/10.1016/j.diin.2017.12.002
Palmer,, D. (2020). Rogue IoT devices are putting your network at risk from hackers. Retrieved from https://www.zdnet.com/article/rogue-iot-devices-are-putting-your-network-at-risk-from-hackers/
Staszewski,, R. (2016). IoT Epoch time disaster? Only time will tell the admissibility of data collected from wearable devices.
U.S. Food and Drug Administration (2020). FDA informs patients, providers and manufacturers about potential cybersecurity vulnerabilities in certain medical devices with bluetooth low energy. Retrieved from https://www.fda.gov/news-events/press-announcements/fda-informs-patients-providers-and-manufacturers-about-potential-cybersecurity-vulnerabilities-0
van Zandwijk,, J. P., & Boztas,, A. (2019). The iPhone health app from a forensic perspective: Can steps and distances registered during walking and running be used as digital evidence? Digital Investigation, 28(Suppl), S126–S133. https://doi.org/10.1016/j.diin.2019.01.021
Zhao,, L., Kang,, Y., Guo,, L., Long,, Y., Xing,, G., Bao,, M., … Wang,, C. (2019). The research of alcohol drinking state analyzing based on smart watch data. Digital Investigation, 28(Suppl), s143. https://doi.org/10.1016/j.diin.2019.01.025

Access to this WIREs title is by subscription only.

Recommend to Your
Librarian Now!

The need for Internet of Things digital forensic black‐boxes

Browse by Topic

Access to this WIREs title is by subscription only.

The latest WIREs articles in your inbox