IoT Forensics Pitfalls for Privacy and a Model for Providing Safeguards

Abstract

Internet of Things (IoT) is a new domain which is designed to make human lives more comfortable and convenient. Conversely, it has also raised issues of security and privacy as a data-driven could-based ecosystem. IoT technology raises challenges for digital forensics investigators when working on cybercrime or digital intrusions. Among these challenges, protacting consumer privacy when conducting investigations is important and difficult. Currently, literature has shown that there is not a single agreed upon IoT-forensic standard model that can protect privacy of 3rd party consumers. This research will address this limitation by developing a privacy-aware IoT forensics model. In this paper, by mapping the ISO/IEC 27037 standard to the three layered reference architecture of IoT, the authors discuss the breach of privacy that may happen when investigating an IoT environment.