Enhanced Digital Forensic Model for Securing the Internet of Things

The implementation of Secure Forensic investigation process by digitally using IoT will result in the connecting of many wireless devices and exposes threat to security vulnerabilities. The data flow from Pre investigation to post investigation and storage or cloud-based targeting key areas of identity on abnormal activity checking footprints in to the server (pre investigation) once identified and proceed to post investigation with examination and saving the data into secure storage. The existing challenge in the development of a thorough inventory and classification system for IoT devices lies in establishing a consistent method for regularly updating a database that encompasses device types, manufacturers, and communication protocols. The suggested IoT forensic model underscores a comprehensive perspective, addressing not only the technical facets of investigation but also considering legal and procedural considerations along with adhering to standard procedures. An inadequacy has been found in the current digital forensic model based on IoT. To address this notable gap, we have formulated an IoT-centric digital forensic model. While the existing IoT-based digital forensic model concentrates on both pre- and post-investigation stages, especially when anomalies are identified and securely recorded, encompassing detailed data such as IP addresses and geographical zones in the pre-investigation phase, our proposed model takes a comprehensive approach, spanning the entire investigation process. This includes the establishment of Standard Operating Procedures (SOP) at the outset and the subsequent archival of evidence, covering the examination and secure storage of evidence on backup servers.