1. An Internet of Things (IoT) Digital Forensics Framework (IDFF) Edewede Oriwoh Department of Computer Science and Technology edewede.oriwoh@beds.ac.uk 3. What is the Internet of Things (IoT)?____ ___ The IoT is the interconnection of disparate (IoT-ready) entities (i.e. Things) for the purposes of communication and functionality (Fig. 1). Examples of Things include fridges, cars, aeroplanes and ships. Some projected estimates for the number of interconnected devices in the future are shown in Table 1 below. Table 1: Various projected estimates of the number of interconnected devices by certain dates. GSMA stands for (Groupe Speciale Mobile) Association; IBM stands for International Business Machines. IRAC Colloquium on Innovation in Computing 23 rd March 2013 2. Research Summary ___________________ ____ The goal of this research is to design an IoT Digital Forensics Framework (IDFF) which -takes into cognisance the nature of the IoT and provides Forensics as a Service (FaaS) to a certain degree until it is necessary to involve external experts; -may or may not employ some of the relevant steps as prescribed by existing traditional Digital Forensics Frameworks. DFF solutions that fail to take into cognisance the nature of the IoT to continually grow, adapt and mutate may eventually become too structured to be of any use in the IoT. 1. Challenge _____ __ _________________ __________ _ _____ “How applicable are existing Digital Forensics Frameworks (DFF) in the Internet of Things (IoT) context?” 4. IoT security issues _____________________ _____________ Identified security challenges in relation to the IoT: eavesdropping, skimming, jousting, Web of Things Botnets (WoTBoT), high-jacking, flooding, spamming, etc. 5. Proposed method:_ __ __ _ - Design and build a test IoT network; - Simulate crimes and test applicability of existing frameworks; - Design new framework (IDFF) incorporating existing methods where applicable. - Test IDFF using criteria: suitability, speed, integrity assurance. 6. How will the proposed IDFF be different?______ __ _____________ -Adaptable and easy to use/manage by end users themselves in the event of a security incident (Table 2). -Easy as changing light bulbs for home owners and as deploying their own forensics centres for large businesses. -Can be integrated into a forensics SYSTEM which can be deployed in homes and similar environments to carry out basic forensics (and security) functions including capturing and sifting through relevant data and producing evidence that is understandable and useful to Home owners and law enforcement Fig.2. Institute for Research in Applicable Computing Bibliography 1. Gang, G., Zeyong, L., & Jun, J. (2011, August). Internet of Things Security Analysis. In Internet Technology and Applications (iTAP), 2011 International Conference on (pp. 1-4). IEEE. Internet of Things (IoT) Overview Fig. 2: Overview of the proposed IoT DFF and related concepts Fig. 1: Overview of the Internet of Things (IoT) Table 2: Differences between Traditional and IoT Digital Forensics Investigations Overview of the proposed IoT Digital Forensics Framework Traditional and IoT Digital Forensics Investigations compared