More Like this

1. Efficient Forensic Prioritization in IoT Investigations

   https://doi.org/10.18178/wcse.2025.06.049  

   Berg, J; Aigbogun, O; An, M (June 2025, WCSE)

   The increasing prevalence of Internet of Things (IoT) devices has introduced significant challenges in digital forensic investigations, requiring new strategies for effective evidence prioritization and analysis. Traditional forensic methods struggle with data heterogeneity, volatility, and legal constraints, making IoT evidence collection complex and time-sensitive. This paper presents a weighted prioritization model (WPM) that ranks IoT devices based on six forensic criteria, enabling investigators to focus on highpriority evidence first, reducing data loss and optimizing forensic workflows. Through case studies in arson, homicide, and missing person investigations, we demonstrate how WPM enhances investigative decisionmaking and resource allocation in real-world forensic scenarios. The proposed framework offers a structured, scalable, and adaptable approach to IoT forensic investigations, improving efficiency, reliability, and legal compliance in digital evidence collection. 

   more » « less
2. Grey Areas of Digital Forensic Tools and a Framework to Solve the IoT Data Forensic Analysis Problems

   Benson, B; Dorai, G (March 2022, Microservices 2022)

   The constant and rapid evolution of technology has led to some amazing achievements. Normal people can communicate with others across the globe, relatively cheap Internet of Things (IoT) devices can be used to secure homes, track fitness and health, control appliances, etc., many people have access to a seemingly endless wealth of information in small devices in their pockets, organizations can provide high availability for important services by spinning up/down servers in minutes to scale with demand through cloud services, etc. However, not everyone who uses these technologies does so with a pure heart and good intentions, many people use them to commit or help commit crimes. A nefarious individual may use cloud services to host a highly available Command and Control (C2) server, a messaging app to form and communicate with a gang or hacking group, or IoT devices as part of a botnet designed to perform Distributed Denial of Service (DDoS) attacks. When these technologies are used in the commission of a crime, they hold valuable information that needs to be recovered forensically to use as evidence to convict the perpetrators. Unfortunately, that ever-evolving technology poses many challenges for digital forensics. This paper identifies and presents many of the challenges faced in digital forensics involving mobile devices, IoT devices, and cloud services in addition to proposing a framework for solving the IoT Forensic Data Analysis problem. 

   more » « less
3. IoT Botnet Forensics: A Comprehensive Digital Forensic Case Study on Mirai Botnet Servers

   https://doi.org/10.1016/j.fsidi.2020.300926  

   Zhang, Xiaolu; Upton, Oren; Beebe, Nicole Lang; Choo, Kim-Kwang Raymond (April 2020, Forensic Science International: Digital Investigation)
4. Forensic proteomics

   https://doi.org/10.1016/j.fsigen.2021.102529  

   Parker, Glendon J.; McKiernan, Heather E.; Legg, Kevin M.; Goecker, Zachary C. (September 2021, Forensic Science International: Genetics)

   null (Ed.)
5. A Scalable Platform for Enabling the Forensic Investigation of Exploited IoT Devices and Their Generated Unsolicited Activities

   https://doi.org/10.1016/j.fsidi.2020.300922  

   Torabi, Sadegh; Bou-Harb, Elias; Assi, Chadi; Debbabi, Mourad (April 2020, Forensic Science International: Digital Investigation)

   null (Ed.)