Internet of things devices: digital forensic process and data reduction. (23rd July 2020)

• Record Type: Journal Article
• Authors: Montasari, Reza; Hill, Richard; Montaseri, Farshad; Jahankhani, Hamid; Hosseinian-Far, Amin
• Is Part Of: International journal of electronic security and digital forensics. Volume 12:Number 4(2020)
• Page Start: 424
• Page End: 436
• Publication Date: 2020-07-23
• Subjects: IoT forensics -- digital forensics -- data acquisition -- big data, process model -- digital investigations -- computer forensics -- formal process; Computer crimes -- Periodicals; Computer crimes -- Investigation -- Periodicals; Computer security -- Periodicals; Electronic commerce -- Law and legislation -- Periodicals; Information warfare -- Periodicals; 005.805
• Languages: English
• ISSNs: 1751-911X

Abstract

The rapid increase in the pervasiveness of digital devices, combined with their heterogeneous nature, has culminated in increasing volumes of diverse data, a.k.a. big data that can become subject to criminal or civil investigations. This growth in big digital forensic data (DFD) has forced digital forensic practitioners (DFPs) to consider seizing a wider range of devices and acquiring larger volumes of data that can be pertinent to the case being investigated. This, in turn, has created an immense backlog of cases for law enforcement agencies worldwide. The method of data reduction by targeted imaging, combined with a robust process model, however, can assist with speeding up the processes of data acquisition and data analysis in IoT device forensic investigations. To this end, we propose an IoT forensic investigation process model, IoT-FIPM, that can facilitate not only the reduction of the evidentiary IoT data, but also a timely acquisition and analysis of this data.