Search papers, labs, and topics across Lattice.
This paper outlines a Twelve-Step Process (TSP) specifically designed for conducting digital forensics in Industrial Internet of Things (IIoT) environments, addressing the inadequacies of traditional methodologies in handling the complexity and scale of IIoT incidents. By systematically guiding practitioners from forensic readiness through to investigation closure, the TSP enhances the collection, analysis, and legal compliance of Potential Digital Evidence (PDE). The proposed framework significantly improves the chances of evidence admissibility in legal contexts, thereby strengthening the integrity of forensic investigations in critical infrastructure sectors.
A tailored Twelve-Step Process for IIoT forensics could redefine how we approach evidence collection in complex industrial environments.
The increasing deployment of the Industrial Internet of Things (IIoT) in critical infrastructure sectors like manufacturing, healthcare, and transportation has shown new challenges for Digital Forensics (DF). Traditional DF methodologies are not well equipped to handle the complexity, scale, and heterogeneity of IIoT environments. This paper introduces a comprehensive Twelve-Step Process (TSP) tailored specifically for IIoT incidents, addressing the need for effective investigation and Potential Digital Evidence (PDE) handling in such dynamic environments in DF. We begin by exploring the importance of IIoT and its role in industrial ecosystems, followed by an examination of existing DF challenges. Each step of the process, from forensic readiness to investigation closure, is designed to ensure robust PDE collection, analysis, and legal compliance to increase chances of admissibility from a DF scenario
