Digital forensics: the missing piece of the Internet of Things promise

Another paper with Mr. Steve Watson titled "Digital forensics: the missing piece of the Internet of Things promise" in (Elsevier) Computer Fraud and Security Volume 2016, Issue 6, pages 5-8. Following is the paper abstract:

As technology advances at a blinding pace, the promise of new gadgets to enhance every facet of our lives tempts every consumer and organisation. From the ease of automation, control and monitoring of the most mundane aspects of our lives to advanced lifesaving and monitoring capabilities, our world is changing daily.

No reliable forensics application or digital forensics guidance exists to retrieve the data from IoT devices in the event of an attack, an active investigation or a litigation request.

The digital forensics of Internet of things (IoT) technologies is the missing conversation in our headlong rush to the promise of connecting every device on the planet. Steve Watson of VTO Labs and Ali Dehghantanha of the University of Salford discuss the issues and the importance of further development in this field. And they elaborate on how forensics practitioners, device manufacturers and legal authorities could share their efforts and minimise this gap.

 

Here is the link to the paper: http://www.sciencedirect.com/science/article/pii/S1361372315300452 

Ali Dehghantanha

Dr. AliDehghantanha (www.alid.info) has served for more than a decade in a variety of industrial and academic positions with leading players in Cyber-Security and E-Commerce. He has long history of working in different areas of computer security as security researcher, malware analyzer, penetration tester, security consultant, professional trainer, and university lecturer. Ali is imminently qualified in the field of cyber security; he has an EU Marie Curie post-doctoral fellowship in cyber forensics (the Marie Curie Fellowships are Europe’s most competitive and prestigious award), Ph.D in Security in Computing and a number of professional qualifications namely SANS-GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), SANS-GIAC Reverse Engineering Malware (GREM), SANS-GIAC Certified Forensics Analyst (GCFA), CCFP (Certified Cyber Forensic Professional), CISSP (Certified Information Systems Security Professional), and CEH (Certified Ethical Hacker). Ali is a fellow of the UK Higher Education Academy (HEA) and served as a keynote speaker for a number of security conferences namely the International Conference on Information Security and Cyber Forensics (InfoSec2015) speaking about “Detection and analysis IoT Malwares" at Cape-Town, South Africa, keynote speaker at the International Conference on Information Security and Digital Forensics (ISDF2015) speaking on "Efficient Analysis of Malware Campaigns" at Kuala Lumpor, Malaysia and invited speaker for ISACA EuroCACS/ISRM 2015 speaking about "Finding the Needle in Internet of Everything Haystack" at Copenhagen, Denmark. In 2015, he was an invited speaker for ISACA North-West UK meeting and talked about "Strategic Cyber Threat Intelligence".  He was one of the lead editors for Elsevier book titled “Contemporary digital forensic investigations of cloud and mobile applications” and a guest editor for a special issue on “Internet of Things: Security and Forensics Trends and Challenges” in the Elsevier Future Generation Computer Systems journal, guest editor for a special issue on "Big Data Applications in Cyber Security and Threat Intelligence" in IEEE Transactions on Big Data.  Ali is the founder of annual “International Conference in Cyber-Security, Cyber Warfare and Digital Forensics (CyberSec)” and served as editor in chief for the International Journal of Cyber Security and Digital Forensics (IJCSDF) between Jan 2012 to Jan 2015!