Abstract:Internet of Things (IoT) devices have expanded the horizon of digital forensic investigations by providing a rich set of new evidence sources. IoT devices includes health implants, sports wearables, smart burglary alarms, smart thermostats, smart electrical appliances, and many more. Digital evidence from these IoT devices is often extracted from third party sources, e.g., paired smartphone applications or the devices' back-end cloud services. However vital digital evidence can still reside solely on the IoT device itself. The specifics of the IoT device's hardware is a black-box in many cases due to the lack of proven, established techniques to inspect IoT devices. This paper presents a novel methodology to inspect the internal software activities of IoT devices through their electromagnetic radiation emissions during live device investigation. When a running IoT device is identified at a crime scene, forensically important software activities can be revealed through an electromagnetic side-channel analysis (EM-SCA) attack. By using two representative IoT hardware platforms, this work demonstrates that cryptographic algorithms running on high-end IoT devices can be detected with over 82% accuracy, while minor software code differences in low-end IoT devices could be detected over 90% accuracy using a neural network-based classifier. Furthermore, it was experimentally demonstrated that malicious modification of the stock firmware of an IoT device can be detected through machine learning-assisted EM-SCA techniques. These techniques provide a new investigative vector for digital forensic investigators to inspect IoT devices.

Digital Investigation and Forensics on MTK-based Pirated Phone

A Survey of Digital Passive Lossless Forensics on Forged and Altered Document

Mid: Tracing Screen Photos Via Moiré Patterns

Methodology for Forensics Data Reconstruction on Mobile Devices with Android Operating System Applying In-System Programming and Combination Firmware

On Tracing Screen Photos-A Moiré Pattern-based Approach

Digital Forensics Security Analysis on iOS Devices

Responding to Living-Off-the-Land Tactics using Just-in-Time Memory Forensics (JIT-MF) for Android

Toward a new tool to extract the Evidence from a Memory Card of Mobile phones

Mobile Forensics: Repeatable and Non-Repeatable Technical Assessments

Forensic Analysis of TomTom Navigation Application

Leveraging Electromagnetic Side-Channel Analysis for the Investigation of IoT Devices

Mobile Phone Forensics: An Investigative Framework based on User Impulsivity and Secure Collaboration Errors

A Digital Forensic Methodology for Encryption Key Recovery from Black-Box IoT Devices

Mobile Cloud Forensics: An Analysis of Seven Popular Android Apps

Security of IoT Device: Perspective Forensic/Anti-Forensic Issues on Invalid Area of NAND Flash Memory

Forensic investigation of small-scale digital devices: a futuristic view

Recovering Residual Forensic Data from Smartphone Interactions with Cloud Storage Providers

Forensic Analysis for Cybersecurity of Smart Home Environments with Smart Wallpads

The State of the Art Forensic Techniques in Mobile Cloud Environment: A Survey, Challenges and Current Trends

Forensic analysis of the Xiaomi Mi Smart Sensor Set

Digital Forensic Investigation of Cloud Storage Services