TY - GEN
T1 - I know what you did last summer
T2 - 13th International Conference on Availability, Reliability and Security, ARES 2018
AU - Dorai, Gokila
AU - Houshmand, Shiva
AU - Baggili, Ibrahim
PY - 2018/8/27
Y1 - 2018/8/27
N2 - The adoption of smart home Internet of Things (IoT) devices continues to grow. What if your devices can snitch on you and let us know where you are at any given point in time? In this work we examined the forensic artifacts produced by Nest devices, and in specific, we examined the logical backup structure of an iPhone used to control a Nest thermostat, Nest Indoor Camera and a Nest Outdoor Camera. We also integrated the Google Home Mini as another method of controlling the studied Smart Home devices. Our work is the primary account for the examination of Nest artifacts produced by an iPhone, and is also the first open source research to produce a usable forensics tool we name the Forensic Evidence Acquisition and Analysis System (FEAAS). FEAAS consolidates evidentiary data into a readable report that can infer user events (like entering or leaving a home) and what triggered an event (whether it was the Google Assistant through a voice command, or the use of an iPhone application). Our results are important for the advancement of digital forensics, as there are cases starting to emerge in which smart home IoT devices have already been used as culpatory evidence.
AB - The adoption of smart home Internet of Things (IoT) devices continues to grow. What if your devices can snitch on you and let us know where you are at any given point in time? In this work we examined the forensic artifacts produced by Nest devices, and in specific, we examined the logical backup structure of an iPhone used to control a Nest thermostat, Nest Indoor Camera and a Nest Outdoor Camera. We also integrated the Google Home Mini as another method of controlling the studied Smart Home devices. Our work is the primary account for the examination of Nest artifacts produced by an iPhone, and is also the first open source research to produce a usable forensics tool we name the Forensic Evidence Acquisition and Analysis System (FEAAS). FEAAS consolidates evidentiary data into a readable report that can infer user events (like entering or leaving a home) and what triggered an event (whether it was the Google Assistant through a voice command, or the use of an iPhone application). Our results are important for the advancement of digital forensics, as there are cases starting to emerge in which smart home IoT devices have already been used as culpatory evidence.
KW - Analysis
KW - Digital evidence extraction
KW - Internet of things forensics
KW - IoT ecosystem forensics
KW - Mobile device forensics
KW - Mobile forensics
KW - Nest device forensics
UR - http://www.scopus.com/inward/record.url?scp=85055284795&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85055284795&partnerID=8YFLogxK
U2 - 10.1145/3230833.3232814
DO - 10.1145/3230833.3232814
M3 - Conference contribution
AN - SCOPUS:85055284795
T3 - ACM International Conference Proceeding Series
BT - ARES 2018 - 13th International Conference on Availability, Reliability and Security
PB - Association for Computing Machinery
Y2 - 27 August 2018 through 30 August 2018
ER -