Abstract:The Internet of Things forensics is a specialised field within digital forensics that focuses on the identification of security incidents, as well as the collection and analysis of evidence with the aim of preventing future attacks on IoT networks. IoT forensics differs from other digital forensic fields due to the unique characteristics of IoT devices, such as limited processing power and connectivity. Although numerous studies are available on IoT forensics, the field is rapidly evolving, and comprehensive surveys are needed to keep up with new developments, emerging threats, and evolving best practices. In this respect, this paper aims to review the state of the art in IoT forensics and discuss the challenges in current investigation techniques. A qualitative analysis of related reviews in the field of IoT forensics has been conducted, identifying key issues and assessing primary obstacles. Despite the variety of topics and approaches, common issues emerge. The majority of these issues are related to the collection and pre-processing of evidence because of the counter-analysis techniques and challenges associated with gathering data from devices and the cloud. Our analysis extends beyond technological problems; it further identifies the procedural problems with preparedness, reporting, and presentation as well as ethical issues. In particular, it provides insights into emerging threats and challenges in IoT forensics, increases awareness and understanding of the importance of IoT forensics in preventing cybercrimes, and ensures the security and privacy of IoT devices and networks. Our findings make a substantial contribution to the field of IoT forensics, as they not only involve a critical analysis of the challenges presented in existing works but also identify numerous problems. These insights will greatly assist researchers in identifying appropriate directions for their future research.

Memory Forensic Analysis of MQTT Devices

Comparative study of IoT forensic frameworks

IoT Forensics: Current Perspectives and Future Directions

MediHunt: A Network Forensics Framework for Medical IoT Devices

Forensic analysis of the Xiaomi Mi Smart Sensor Set

Navigating the IoT landscape: Unraveling forensics, security issues, applications, research challenges, and future

Enabling Lightweight Device Authentication in Message Queuing Telemetry Transport Protocol

Leveraging Electromagnetic Side-Channel Analysis for the Investigation of IoT Devices

IoT Forensic -- A digital investigation framework for IoT systems

Application-Specific Digital Forensics Investigative Model in Internet of Things (Iot)

Digital Forensics in Internet of Things

A Survey on IoT Profiling, Fingerprinting, and Identification

Collecting Channel State Information in Wi-Fi Access Points for IoT Forensics

Effective Feature Engineering Framework for Securing MQTT Protocol in IoT Environments

Measurement and Analysis of Network Data Based on MQTT Protocol.

Trampoline Over the Air: Breaking in IoT Devices Through MQTT Brokers

Attack detection and mitigation using Intelligent attack graph model for Forensic in IoT Networks

Large-Scale Security Analysis of Real-World Backend Deployments Speaking IoT-Focused Protocols

IoTScent: Enhancing Forensic Capabilities in Internet of Things Gateways

Improvement of MQTT semantic to minimize data flow in IoT platforms based on distributed brokers

A Digital Forensic Methodology for Encryption Key Recovery from Black-Box IoT Devices