Visible to the public Digital Forensics and Incident Response (DFIR) Challenges in IoT Platforms

TitleDigital Forensics and Incident Response (DFIR) Challenges in IoT Platforms
Publication TypeConference Paper
Year of Publication2021
AuthorsItodo, Cornelius, Varlioglu, Said, Elsayed, Nelly
Conference Name2021 4th International Conference on Information and Computer Technologies (ICICT)
Keywordsbest practices, computer security, DFIR, digital forensics, Hardware, Human Behavior, Incident Response, Internet of Things, IoT, IoT security, Metrics, pubcrawl, resilience, Resiliency, Scalability, Standards, Task Analysis
AbstractThe rapid progress experienced in the Internet of Things (IoT) space is one that has introduced new and unique challenges for cybersecurity and IoT-Forensics. One of these problems is how digital forensics and incident response (DFIR) are handled in IoT. Since enormous users use IoT platforms to accomplish their day to day task, massive amounts of data streams are transferred with limited hardware resources; conducting DFIR needs a new approach to mitigate digital evidence and incident response challenges owing to the facts that there are no unified standard or classified principles for IoT forensics. Today's IoT DFIR relies on self-defined best practices and experiences. Given these challenges, IoT-related incidents need a more structured approach in identifying problems of DFIR. In this paper, we examined the major DFIR challenges in IoT by exploring the different phases involved in a DFIR when responding to IoT-related incidents. This study aims to provide researchers and practitioners a road-map that will help improve the standards of IoT security and DFIR.
DOI10.1109/ICICT52872.2021.00040
Citation Keyitodo_digital_2021