Digital forensic approaches for Amazon Alexa ecosystem
Digital forensic approaches for Amazon Alexa ecosystem
复制标题
DOI：
10.1016/j.diin.2017.06.010
复制
发表时间：
2017-08-01
影响因子：
--
通讯作者：
Lee, Sangjin
中科院分区：
文献类型：
--
作者：
Chung, Hyunji;Park, Jungheum;Lee, Sangjin
亚马逊Echo（亚马逊开发的智能扬声器）等物联网（IoT）设备无疑是潜在数字证据的重要来源，因为它们无处不在且始终开启的操作模式，构成了人类生活的黑匣子。Amazon Echo特别是为Amazon Lab 126开发的基于云的智能虚拟助理（IVA）Alexa发挥了核心作用。支持Alexa的无线智能扬声器是提交给Alexa的所有语音命令的网关。此外，IVA还可以与大量兼容的物联网设备和利用云资源的第三方应用程序进行交互。了解允许Alexa无处不在的复杂云生态系统对于在需求增加时支持数字调查至关重要。本文讨论了有关IVA Alexa生态系统的数字取证方法。本文的主要贡献包括一种新的有效方法，将云原生取证与客户端取证（配套设备的取证）相结合，以支持实际的数字调查。基于对目标生态系统的深入理解，我们提出了一个概念验证工具CIFT，它支持识别、获取和分析来自云的本地工件和来自本地设备（移动的应用程序和Web浏览器）的以客户端为中心的工件。(C)2017作者（S）由Elsevier Ltd.代表DFRWS出版。
Internet of Things (IoT) devices such as the Amazon Echo - a smart speaker developed by Amazon - are undoubtedly great sources of potential digital evidence due to their ubiquitous use and their always-on mode of operation, constituting a human-life's black box. The Amazon Echo in particular plays a centric role for the cloud-based intelligent virtual assistant (IVA) Alexa developed by Amazon Lab126. The Alexa-enabled wireless smart speaker is the gateway for all voice commands submitted to Alexa. Moreover, the IVA interacts with a plethora of compatible IoT devices and third-party applications that leverage cloud resources. Understanding the complex cloud ecosystem that allows ubiquitous use of Alexa is paramount on supporting digital investigations when need raises. This paper discusses methods for digital forensics pertaining to the IVA Alexa's ecosystem. The primary contribution of this paper consists of a new efficient approach of combining cloud-native forensics with client-side forensics (forensics for companion devices), to support practical digital investigations. Based on a deep understanding of the targeted ecosystem, we propose a proof-of-concept tool, CIFT, that supports identification, acquisition and analysis of both native artifacts from the cloud and client-centric artifacts from local devices (mobile applications and web browsers). (C) 2017 The Author(s). Published by Elsevier Ltd. on behalf of DFRWS.