{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T02:12:26Z","timestamp":1768875146229,"version":"3.49.0"},"reference-count":54,"publisher":"Wiley","issue":"5","license":[{"start":{"date-parts":[[2023,3,5]],"date-time":"2023-03-05T00:00:00Z","timestamp":1677974400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/http\/onlinelibrary.wiley.com\/termsAndConditions#vor"}],"content-domain":{"domain":["onlinelibrary.wiley.com"],"crossmark-restriction":true},"short-container-title":["Security and Privacy"],"published-print":{"date-parts":[[2023,9]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>The widespread use of networked, intelligent, and adaptable devices in various domains, such as smart cities and home automation, climate control, manufacturing and logistics, healthcare, education, and agriculture, has been hastened by recent developments in hardware and software technologies. In all these application domains, the concept of the Internet of Things helps to achieve process automation and decrease labor costs. While IoT has been an established domain for quite a while, it has seen a lot of advances and challenges in different subdomains over the years. One such subdomain is IoT Forensics which involves digital forensics concerning IoT devices, networks, or clouds. In this process of obtaining substantial evidence from the devices, networks, or cloud, a large amount of data and operations on said data are involved. Hence, looking through IoT Forensics through the methodology dealing with data, known as data analytics, is essential. This paper presents an interpretation of IoT Forensics from the standpoint of data analytics. To explain the same in detail, the paper focuses on IoT Forensics, its methodologies, and how they relate to data analytics stages. Toward the end, the paper discusses current developments in IoT Forensics from the data analytics perspective, limitations observed in the existing technologies, adoption challenges, and possible future advancements.<\/jats:p>","DOI":"10.1002\/spy2.306","type":"journal-article","created":{"date-parts":[[2023,3,6]],"date-time":"2023-03-06T00:58:31Z","timestamp":1678064311000},"update-policy":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1002\/crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Toward the internet of things forensics: A data analytics perspective"],"prefix":"10.1002","volume":"6","author":[{"given":"Pimal","family":"Khanpara","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, Institute of Technology Nirma University Ahmedabad Gujarat India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/2.zoppoz.workers.dev:443\/https\/orcid.org\/0000-0002-4220-8008","authenticated-orcid":false,"given":"Ishwa","family":"Shah","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Institute of Technology Nirma University Ahmedabad Gujarat India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/2.zoppoz.workers.dev:443\/https\/orcid.org\/0000-0002-1776-4651","authenticated-orcid":false,"given":"Sudeep","family":"Tanwar","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Institute of Technology Nirma University Ahmedabad Gujarat India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amit","family":"Verma","sequence":"additional","affiliation":[{"name":"Department of Computer Science Engineering, University Centre for Research &amp; Development Chandigarh University Mohali Punjab India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ravi","family":"Sharma","sequence":"additional","affiliation":[{"name":"Centre for Inter\u2010Disciplinary Research and Innovation University of Petroleum and Energy Studies Dehradun India"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","published-online":{"date-parts":[[2023,3,5]]},"reference":[{"key":"e_1_2_10_2_1","article-title":"A context\u2010aware internet of things\u2010driven security scheme for smart homes","author":"Khanpara P","year":"2022","journal-title":"Secur Privacy"},{"key":"e_1_2_10_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3022842"},{"key":"e_1_2_10_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2021.03.005"},{"key":"e_1_2_10_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2939534"},{"key":"e_1_2_10_6_1","first-page":"175","volume-title":"Robust and Secure Routing Protocols for MANET\u2010Based Internet of Things Systems\u2014A Survey","author":"Trivedi R","year":"2021"},{"key":"e_1_2_10_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-2750-5_52"},{"key":"e_1_2_10_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2018.8328748"},{"key":"e_1_2_10_9_1","doi-asserted-by":"publisher","DOI":"10.12694\/scpe.v20i2.1533"},{"key":"e_1_2_10_10_1","first-page":"171","volume-title":"Additive Manufacturing: Concepts and Technologies","author":"Khanpara P","year":"2020"},{"key":"e_1_2_10_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2962586"},{"key":"e_1_2_10_12_1","unstructured":"Internet of Things (IoT) Forensics Law and Forensics.https:\/\/2.zoppoz.workers.dev:443\/https\/www.lawandforensics.com\/forensic\u2010services\/internet\u2010of\u2010things\u2010forensics\u20102\/ 2022; ."},{"key":"e_1_2_10_13_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.09.058"},{"key":"e_1_2_10_14_1","unstructured":"DunnR.IoT applications in forensics.https:\/\/2.zoppoz.workers.dev:443\/https\/www.iotforall.com\/iot\u2010applications\u2010forensics\/2022."},{"key":"e_1_2_10_15_1","doi-asserted-by":"crossref","unstructured":"AleneziA AtlamH AlsagriR AlassafiM WillsG.IoT Forensics: A state\u2010of\u2010the\u2010art review callenges and future directions.2019.","DOI":"10.5220\/0007905401060115"},{"key":"e_1_2_10_16_1","first-page":"599","volume-title":"Survey of Techniques Used for Tolerance of Flooding Attacks in DTN","author":"Shah M","year":"2019"},{"issue":"6","key":"e_1_2_10_17_1","first-page":"3011","article-title":"Integrated intelligent IOT forensic framework for data acquisition through open\u2010source tools","volume":"14","author":"Surange G","year":"2022","journal-title":"Int J Inf Technol"},{"key":"e_1_2_10_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/CITS49457.2020.9232662"},{"key":"e_1_2_10_19_1","unstructured":"JosephMA.Digital Forensics is ready for its most recent challenge: IoT Forensics. Accessed September 6 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/www.linkedin.com\/pulse\/digital\u2010forensics\u2010ready\u2010its\u2010most\u2010recent\u2010challenge\u2010iot\u2010joseph\/2022."},{"key":"e_1_2_10_20_1","doi-asserted-by":"crossref","unstructured":"ContiM DehghantanhaA FrankeK WatsonS.Internet of Things security and forensics: Challenges and opportunities.2018.","DOI":"10.1016\/j.future.2017.07.060"},{"key":"e_1_2_10_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2022.301343"},{"issue":"5","key":"e_1_2_10_22_1","first-page":"1285","article-title":"IoT evidence acquisition\u2014issues and challenges","volume":"10","author":"Rughani PH","year":"2017","journal-title":"Adv Comput Sci Technol"},{"key":"e_1_2_10_23_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2020.100220"},{"key":"e_1_2_10_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-658-29779-4"},{"key":"e_1_2_10_25_1","unstructured":"FrankenfieldJ RathburnP.Data analytics. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/www.investopedia.com\/terms\/d\/data\u2010analytics.asp\/"},{"key":"e_1_2_10_26_1","first-page":"37","volume-title":"Energy Conservation in Multimedia Big Data Computing and the Internet of Things\u2014A Challenge","author":"Khanpara P","year":"2020"},{"key":"e_1_2_10_27_1","doi-asserted-by":"publisher","DOI":"10.1093\/jigpal\/jzac012"},{"key":"e_1_2_10_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2939573"},{"key":"e_1_2_10_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2019.1800553"},{"key":"e_1_2_10_30_1","unstructured":"KumarA.Data Analytics: Step by Step Approach Medium. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/medium.datadriveninvestor.com\/data\u2010analytics\u2010step\u2010by\u2010step\u2010approach\u2010757c6a0bd8a2\/"},{"key":"e_1_2_10_31_1","unstructured":"RanaN SansanwalG KhatterK SinghS.Taxonomy of digital forensics: investigation tools and challenges. arXiv preprint arXiv:1709.06529.2017."},{"key":"e_1_2_10_32_1","unstructured":"LillisD BeckerB O'Sullivan T ScanlonM.Current challenges and future research areas for digital forensic investigation. arXiv preprint arXiv:1604.03850.2016."},{"key":"e_1_2_10_33_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsir.2019.100008"},{"key":"e_1_2_10_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2993803"},{"key":"e_1_2_10_35_1","doi-asserted-by":"publisher","DOI":"10.1002\/ett.4176"},{"key":"e_1_2_10_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2913648"},{"key":"e_1_2_10_37_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2016.10.029"},{"key":"e_1_2_10_38_1","first-page":"274","volume-title":"International Conference on Reliability and Statistics in Transportation and Communication","author":"Krivchenkov A","year":"2018"},{"key":"e_1_2_10_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2494502"},{"key":"e_1_2_10_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.4251117"},{"key":"e_1_2_10_41_1","doi-asserted-by":"publisher","DOI":"10.1080\/15614263.2015.1128163"},{"key":"e_1_2_10_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2867466"},{"key":"e_1_2_10_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2827027"},{"key":"e_1_2_10_44_1","unstructured":"MuraliJ.Internet of Things based crime investigation. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/www.deccanchronicle.com\/nation\/current\u2010affairs\/220419\/internet\u2010of\u2010things\u2010based\u2010crime\u2010investigation.html\/"},{"key":"e_1_2_10_45_1","unstructured":"WattsA.Cops use murdered woman's Fitbit to charge her husband CNN. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/edition.cnn.com\/2017\/04\/25\/us\/fitbit\u2010womans\u2010death\u2010investigation\u2010trnd\/index.html\/."},{"key":"e_1_2_10_46_1","unstructured":"VaasL.Fitbit data leads to arrest of 90\u2010year\u2010old in stepdaughter's murder. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/nakedsecurity.sophos.com\/2018\/10\/08\/fitbit\u2010data\u2010leads\u2010to\u2010arrest\u2010of\u201090\u2010year\u2010old\u2010in\u2010stepdaughters\u2010murder\/"},{"key":"e_1_2_10_47_1","unstructured":"SharmanJ.Driver chased moped rider after wing mirror broken ran him down then beat him as he lay dying. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/www.independent.co.uk\/news\/uk\/crime\/enfield\u2010mustang\u2010driver\u2010hit\u2010run\u2010murder\u2010sohban\u2010khan\u2010bradley\u2010clifford\u2010london\u2010a8333201.html\/"},{"key":"e_1_2_10_48_1","unstructured":"PressTA.Man charged with arson after police read his pacemaker data. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/globalnews.ca\/news\/3245884\/man\u2010charged\u2010with\u2010arson\u2010after\u2010police\u2010read\u2010his\u2010pacemaker\u2010data\/."},{"key":"e_1_2_10_49_1","unstructured":"NewsroomSV.FitBit Murder Suspect Dies in Santa Clara County Jail. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/www.sanjoseinside.com\/news\/fitbit\u2010murder\u2010suspect\u2010des\u2010in\u2010santa\u2010clara\u2010county\u2010jail\/."},{"key":"e_1_2_10_50_1","unstructured":"LeMereB BolloJ.A rapidly growing source of critical digital evidence Evidence Technology Magazine. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/read.nxtbook.com\/wordsmith\/evidence_technology\/winter_2018\/vehicle_forensics_a_rapidly_g.html\/"},{"key":"e_1_2_10_51_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-6044-6"},{"key":"e_1_2_10_52_1","unstructured":"PackL.Prosecutor: Man awaiting arson trial in Middletown pacemaker case dies Dayton Daily News. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/www.daytondailynews.com\/news\/crime\u2010\u2010law\/prosecutor\u2010man\u2010awaiting\u2010arson\u2010trial\u2010middletown\u2010pacemaker\u2010case\u2010dies\/PORi20NIKa8ONyVZis7RvN\/."},{"key":"e_1_2_10_53_1","doi-asserted-by":"publisher","DOI":"10.12988\/ces.2014.4685"},{"key":"e_1_2_10_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT48130.2020.9221265"},{"key":"e_1_2_10_55_1","unstructured":"FinanceY.Global Digital Forensics Market Report 2022. Accessed September 8 2022.https:\/\/2.zoppoz.workers.dev:443\/https\/finance.yahoo.com\/news\/global\u2010digital\u2010forensics\u2010market\u2010report\u2010123300416.html\/"}],"container-title":["SECURITY AND PRIVACY"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/spy2.306","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/onlinelibrary.wiley.com\/doi\/full-xml\/10.1002\/spy2.306","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/spy2.306","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,15]],"date-time":"2024-10-15T20:01:11Z","timestamp":1729022471000},"score":1,"resource":{"primary":{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/onlinelibrary.wiley.com\/doi\/10.1002\/spy2.306"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,5]]},"references-count":54,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2023,9]]}},"alternative-id":["10.1002\/spy2.306"],"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1002\/spy2.306","archive":["Portico"],"relation":{},"ISSN":["2475-6725","2475-6725"],"issn-type":[{"value":"2475-6725","type":"print"},{"value":"2475-6725","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,5]]},"assertion":[{"value":"2022-12-11","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-02-18","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-03-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"e306"}}