Formalization in Digital Forensic Triage for Identification of Malicious IoT Devices
Mohammed Ibrahim1, Muhammed Basheer Jasser2, Mohd Taufik Abdullah3, Azizol Abdullah4

1Mohammed Ibrahim, Faculty of Computer Science, University Putra Malaysia,43400 UPM Serdang, Selangor, Malaysia.
2Muhammed Basheer Jasser, Faculty of Computer Science, University Putra Malaysia,43400 UPM Serdang, Selangor, Malaysia.
3Mohd Taufik Abdullah, Faculty of Computer Science, University Putra Malaysia UPM Serdang, Selangor, Malaysia.
4Azizol Abdullah, Faculty of Computer Science, University Putra Malaysia UPM Serdang, Selangor, Malaysia.
Manuscript received on September 22, 2019. | Revised Manuscript received on October 20, 2019. | Manuscript published on October 30, 2019. | PP: 1699-1702 | Volume-9 Issue-1, October 2019 | Retrieval Number: A2638109119/2019©BEIESP | DOI: 10.35940/ijeat.A2638.109119
Open Access | Ethics and Policies | Cite | Mendeley
© The Authors. Blue Eyes Intelligence Engineering and Sciences Publication (BEIESP). This is an open access article under the CC BY-NC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/)

Abstract: Considering the large number of devices connected to the Internet of Things(IoT), identifying malicious devices for the purpose of “search & seizure” remainsa critical issue for digital investigators. Consequently, the need for techniques that automatically identify malicious devices can speed up the process of digital investigation. However, few conceptual approaches were proposed to identify malicious devices during IoT forensic investigation. To overcome that, a formal approach is proposed to automatically triage and fingerprint IoT Malicious devices with their respective states. It is expected that with the proposed formal approach, investigators can simply identify malicious devices, their states as well as determine the scope of investigation.
Keywords: Formalization, IoT Forensic, Sensor, Triage.