Research Area: Digital Forensics
The scope of this paper is two-fold: firstly it proposes the application of a 1-2-3 Zones approach to Internet of Things (IoT)-related Digital Forensics (DF) investigations. Secondly, it introduces a Next-Best-Thing Triage (NBT) Model for use in conjunction with the 1-2-3 Zones approach where necessary and vice versa. These two `approaches are essential for the DF process from an IoT perspective: the atypical nature of IoT sources of evidence (i.e. Objects of Forensic Interest - OOFI), the pervasiveness of the IoT environment and its other unique attributes - and the combination of these attributes - dictate the necessity for a systematic DF approach to incidents. The two approaches proposed are designed to serve as a beacon to incident responders, increasing the efficiency and effectiveness of their IoT-related investigations by maximizing the use of the available time and ensuring relevant evidence identification and acquisition. The approaches can also be applied in conjunction with existing, recognised DF models, methodologies and frameworks.
Keywords:
Author(s) Name: Edewede Oriwoh; David Jazani; Gregory Epiphaniou; Paul Sant
Journal name:
Conferrence name: IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing
Publisher name: IEEE
DOI: 10.4108/icst.collaboratecom.2013.254159
Volume Information:
