Title: Internet of things devices: digital forensic process and data reduction

Authors: Reza Montasari; Richard Hill; Farshad Montaseri; Hamid Jahankhani; Amin Hosseinian-Far

Addresses: Department of Computer Science, School of Computing and Engineering, University of Huddersfield Queensgate, HD1-3DH, UK ' Department of Computer Science, School of Computing and Engineering, University of Huddersfield Queensgate, HD1-3DH, UK ' Tehran, Iran ' Northumbria University London, 110 Middlesex Street, London, England, E1 7HT, UK ' Faculty of Business and Law, University of Northampton, University Drive, Northampton, NN1 5PH, UK

Abstract: The rapid increase in the pervasiveness of digital devices, combined with their heterogeneous nature, has culminated in increasing volumes of diverse data, a.k.a. big data that can become subject to criminal or civil investigations. This growth in big digital forensic data (DFD) has forced digital forensic practitioners (DFPs) to consider seizing a wider range of devices and acquiring larger volumes of data that can be pertinent to the case being investigated. This, in turn, has created an immense backlog of cases for law enforcement agencies worldwide. The method of data reduction by targeted imaging, combined with a robust process model, however, can assist with speeding up the processes of data acquisition and data analysis in IoT device forensic investigations. To this end, we propose an IoT forensic investigation process model, IoT-FIPM, that can facilitate not only the reduction of the evidentiary IoT data, but also a timely acquisition and analysis of this data.

Keywords: IoT forensics; digital forensics; data acquisition; big data, process model; digital investigations; computer forensics; formal process.

DOI: 10.1504/IJESDF.2020.110676

International Journal of Electronic Security and Digital Forensics, 2020 Vol.12 No.4, pp.424 - 436

Received: 03 Oct 2019
Accepted: 14 Nov 2019
Published online: 27 Oct 2020 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article