121
Internet of Nano-Things Forensics
data acquisition for the forensic purpose, so that the investigators will find it a complex
challenge for collecting evidence from the highly distributed IoNT infrastructure.
The rest of this chapter is organized as follows: Section 7.2 introduces a brief background about digital forensics, IoT forensics, and IoNT while the new area of IoNT
forensics (IoNTF) is presented in Section 7.3. Section 7.4 provides the proposed IoNTF
investigation model and finally the chapter conclusion and future directions are presented in Section 7.5.
7.2 Background
This section introduces a brief overview about digital forensics, IoT forensics, and IoNT.
7.2.1 Digital Forensics
This section presents the concept of digital forensics and an introduction into current digital forensic investigation process to build the reader’s understanding of the discipline.
7.2.1.1 Definition
The first Digital Forensic Research Workshop (DFRWS) defined digital forensics as:
The use of scientifically derived and proven methods toward the preservation, collection,
validation, identification, analysis, interpretation, documentation, and presentation of
digital evidence derived from digital sources for the purpose of facilitating or furthering the reconstruction of events found to be criminal, or helping to anticipate unauthorized actions shown to be disruptive to planned operations. (Palmer 2001).
7.2.1.2 Digital Forensics Investigation Life Cycle
From the digital forensics definition, the digital forensic investigation process involves
several stages and steps to handle and manage the digital evidence that can be extracted
from the crime scene as follows (Figure 7.1):
• Identification: This process involves the identification of an incident and the
evidence thereof, which will be required to prove the incident.
• Collection: In this process, an examiner and a digital investigator collect digital
evidence from the crime scene.
Identification
Collection
Extraction
Report
Examination
Analysis
FIGURE 7.1
Digital forensic investigation process.
Internet of Nano-Things Forensics
data acquisition for the forensic purpose, so that the investigators will find it a complex
challenge for collecting evidence from the highly distributed IoNT infrastructure.
The rest of this chapter is organized as follows: Section 7.2 introduces a brief background about digital forensics, IoT forensics, and IoNT while the new area of IoNT
forensics (IoNTF) is presented in Section 7.3. Section 7.4 provides the proposed IoNTF
investigation model and finally the chapter conclusion and future directions are presented in Section 7.5.
7.2 Background
This section introduces a brief overview about digital forensics, IoT forensics, and IoNT.
7.2.1 Digital Forensics
This section presents the concept of digital forensics and an introduction into current digital forensic investigation process to build the reader’s understanding of the discipline.
7.2.1.1 Definition
The first Digital Forensic Research Workshop (DFRWS) defined digital forensics as:
The use of scientifically derived and proven methods toward the preservation, collection,
validation, identification, analysis, interpretation, documentation, and presentation of
digital evidence derived from digital sources for the purpose of facilitating or furthering the reconstruction of events found to be criminal, or helping to anticipate unauthorized actions shown to be disruptive to planned operations. (Palmer 2001).
7.2.1.2 Digital Forensics Investigation Life Cycle
From the digital forensics definition, the digital forensic investigation process involves
several stages and steps to handle and manage the digital evidence that can be extracted
from the crime scene as follows (Figure 7.1):
• Identification: This process involves the identification of an incident and the
evidence thereof, which will be required to prove the incident.
• Collection: In this process, an examiner and a digital investigator collect digital
evidence from the crime scene.
Identification
Collection
Extraction
Report
Examination
Analysis
FIGURE 7.1
Digital forensic investigation process.