[DFSci] Feedback on the definition of IoT Forensics

[Brunty, Josh]

Hi Tina,

The definition is a solid beginning. I would, however, recommend a renaming embedded devices to "embedded systems" as it is extends into and covers the traditional embedded devices, but also extends into embedded software architectures such micro/monolithic/exo- kernels (i.e. Embedded Linux/Windows CE), and other specialty systems such as CAN bus and OBD-II systems (used in the auto industry).  A small tweak, but it casts a bigger net nonetheless. 

I would also recommend that a definition of IoT Forensics explicitly say "Internet of Things" somewhere in there as not to create any confusion/diversion on what the IoT acronym is.  I would hope that everyone knows what IoT means in this day and age, but there is always that one person in the room...  

I know this response was to go directly to you, but for the sake of transparency I'd like to see my colleagues expand upon my thinking here.

Thanks,
Josh Brunty
josh.brunty at marshall.edu


On 3/20/19, 2:51 PM, "DFSci on behalf of Tina Wu" <dfsci-bounces at lists.dfrws.org on behalf of tina.wu at kellogg.ox.ac.uk> wrote:

    Hello All.
    
    
    
    We recently carried out a survey on establishing a definition on IoT forensics, based on the responses we proposed the following definition:
    
    
    
    “IoT forensics is a sub-domain of digital forensics and involves the collection, preservation, analysis and presentation of data obtained from IoT devices. It consists of various domains / skills including networking, embedded device, cloud, mobile, host based forensics and reverse engineering. For the purpose of collating historical data of interactions from IoT device(s) to reconstruct criminal events or obtaining remnants of data that indicates a malicious act or exploitation
    
    of an IoT device."
    
    
    
    Could you please provide your feedback and thoughts on the above definition and send this to tina.wu at kellogg.ox.ac.uk.
    
    
    
    Regards
    
    Tina
    _______________________________________________
    DFSci mailing list
    DFSci at lists.dfrws.org
    
    Manage your subscription at:
    http://lists.dfrws.org/listinfo.cgi/dfsci-dfrws.org