Internet of Things Forensics in Smart Homes: Design, Implementation, and Analysis of Smart Home Laboratory

Shinelle Hutchinson; Yung Han Yoon; Neesha Shantaram; Umit Karabiyik

Download Paper | Permalink

Conference: 2020 ASEE Virtual Annual Conference Content Access
Location: Virtual On line
Publication Date: June 22, 2020
Start Date: June 22, 2020
End Date: June 26, 2021
Conference Session: Computing and Information Technology Division Technical Session 5
Tagged Division: Computing and Information Technology
Tagged Topic: Diversity
Page Count: 20
DOI: 10.18260/1-2--34868
Permanent URL: https://strategy.asee.org/34868
Download Count: 2319

Request a correction

Paper Authors

biography

Shinelle Hutchinson Purdue University, West Lafayette

visit author page

I am a Ph.D. student at Purdue University studying Digital and Cyber Forensics. I obtained my Masters of Science in Digital Forensics from Sam Houston State University and my Bachelor's of Science in Computer Science from the University of the West Indies. I have research interests in Internet of Things (IoT) Forensics, Mobile Forensics, and IoT and Mobile Security and Privacy.

visit author page

author page

Dr. Umit Karabiyik is an Assistant Professor in the Department of Computer and Information Technology at Purdue University. Prior to his appointment at Purdue, Dr. Karabiyik was an Assistant Professor in the Department of Computer Science at Sam Houston State University from 2015 to 2018. Dr. K received his M.S. and Ph.D. degrees from Florida State University in 2010 and 2015 respectively. His research interests broadly lie in Digital and Cyber Forensics, User and Data Privacy, Artificial Intelligence, Computer and Network Security. He is a recipient of federal grants from National Institute of Justice. He is an Associate Editor-in-Chief for Journal of Digital Forensics, Security and Law, and technical program committee (TPC) member of high quality international conferences in Digital Forensics and Security.

visit author page

Download Paper | Permalink

Abstract

The Internet of Things (IoT) has skyrocketed to the forefront of everyone’s lives, whether they know it or not. IoT devices have been incorporated into all facets of life, from the medical industry to transportation and it has even made its way into our homes. These devices have access to vast amounts of data, especially personal data. However, due to the compact nature of these devices, insufficient effort has been made to incorporate security into their design. With that in mind, IoT devices are treasure-troves of potential evidentiary data for forensic investigators, especially when these devices are used to aid in criminal activities. Concerning IoT devices, there is a need to investigate these devices to find answers to questions such as, what data can be recovered from these devices along with their respective smartphone applications? What methods would be best suited for collecting and analyzing this data? What data do these devices share with each other? Are there any privacy concerns when using these devices? Are there any security vulnerabilities when using these devices? Finding answers to these questions will considerably reduce the amount of time investigators spend collecting evidence during a case. New IoT devices are always becoming available and the research into each cannot keep up. As such, there is a gap in the literature regarding both the privacy and security of these devices and the most efficient methods to investigate them. Therefore, in this study, we aim to address this need by first building our own IoT forensics laboratory at Purdue University. Several students (undergraduate and graduate) work under the supervision of their faculty advisor to populate this lab with relevant IoT devices to simulate that of a smart home. This setup would allow us to simulate possible real-world smart home events (i.e. IoT device compromise, IoT device as a witness) which we can then investigate to both find answers to aforementioned questions and develop efficient methods to investigate these IoT devices. In this paper we will discuss several ways in which IoT devices in a smart home can be compromised and also investigate these devices after the compromise to determine what data can be recovered, how to recover the data and where this data resides.

Citation
Format

Hutchinson, S., & Yoon, Y. H., & Shantaram, N., & Karabiyik, U. (2020, June), Internet of Things Forensics in Smart Homes: Design, Implementation, and Analysis of Smart Home Laboratory Paper presented at 2020 ASEE Virtual Annual Conference Content Access, Virtual On line . 10.18260/1-2--34868

TY - CPAPER
AB - The Internet of Things (IoT) has skyrocketed to the forefront of everyone’s lives, whether they know it or not. IoT devices have been incorporated into all facets of life, from the medical industry to transportation and it has even made its way into our homes. These devices have access to vast amounts of data, especially personal data. However, due to the compact nature of these devices, insufficient effort has been made to incorporate security into their design. With that in mind, IoT devices are treasure-troves of potential evidentiary data for forensic investigators, especially when these devices are used to aid in criminal activities. Concerning IoT devices, there is a need to investigate these devices to find answers to questions such as, what data can be recovered from these devices along with their respective smartphone applications? What methods would be best suited for collecting and analyzing this data? What data do these devices share with each other? Are there any privacy concerns when using these devices? Are there any security vulnerabilities when using these devices? Finding answers to these questions will considerably reduce the amount of time investigators spend collecting evidence during a case. New IoT devices are always becoming available and the research into each cannot keep up. As such, there is a gap in the literature regarding both the privacy and security of these devices and the most efficient methods to investigate them. Therefore, in this study, we aim to address this need by first building our own IoT forensics laboratory at Purdue University. Several students (undergraduate and graduate) work under the supervision of their faculty advisor to populate this lab with relevant IoT devices to simulate that of a smart home. This setup would allow us to simulate possible real-world smart home events (i.e. IoT device compromise, IoT device as a witness) which we can then investigate to both find answers to aforementioned questions and develop efficient methods to investigate these IoT devices. In this paper we will discuss several ways in which IoT devices in a smart home can be compromised and also investigate these devices after the compromise to determine what data can be recovered, how to recover the data and where this data resides.
AU - Shinelle Hutchinson
AU - Yung Han Yoon
AU - Neesha Shantaram
AU - Umit Karabiyik
CY - Virtual On line
DA - 2020/06/22
PB - ASEE Conferences
TI - Internet of Things Forensics in Smart Homes: Design, Implementation, and Analysis of Smart Home Laboratory
UR - https://strategy.asee.org/34868
DO - 10.18260/1-2--34868
ER -