I Know What You Did Last Summer: Your Smart Home Internet of Things and Your iPhone Forensically Ratting You Out
I Know What You Did Last Summer: Your Smart Home Internet of Things and Your iPhone Forensically Ratting You Out
复制标题
我知道你去年夏天做了什么：你的智能家居物联网和你的 iPhone 法证地出卖你
DOI：
10.1145/3230833.3232814
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
I. Baggili
中科院分区：
文献类型：
--
作者：
Gokila Dorai;Shiva Houshmand;I. Baggili
智能家居物联网（IoT）设备的采用持续增长。如果你的设备可以告密，让我们知道你在任何给定的时间点在哪里？在这项工作中，我们检查了Nest设备产生的取证工件，具体来说，我们检查了用于控制Nest恒温器，Nest室内摄像头和Nest室外摄像头的iPhone的逻辑备份结构。我们还集成了Google Home Mini作为控制所研究的智能家居设备的另一种方法。我们的工作是检查iPhone产生的Nest工件的主要原因，也是第一个产生可用取证工具的开源研究，我们将其命名为法医证据采集和分析系统（FEAAS）。FEAAS将证据数据整合到可读的报告中，可以推断用户事件（例如进入或离开家）以及触发事件的原因（无论是通过语音命令的Google Assistant还是使用iPhone应用程序）。我们的研究结果对于数字取证的进步非常重要，因为已经开始出现智能家居物联网设备已被用作犯罪证据的案例。
The adoption of smart home Internet of Things (IoT) devices continues to grow. What if your devices can snitch on you and let us know where you are at any given point in time? In this work we examined the forensic artifacts produced by Nest devices, and in specific, we examined the logical backup structure of an iPhone used to control a Nest thermostat, Nest Indoor Camera and a Nest Outdoor Camera. We also integrated the Google Home Mini as another method of controlling the studied Smart Home devices. Our work is the primary account for the examination of Nest artifacts produced by an iPhone, and is also the first open source research to produce a usable forensics tool we name the Forensic Evidence Acquisition and Analysis System (FEAAS). FEAAS consolidates evidentiary data into a readable report that can infer user events (like entering or leaving a home) and what triggered an event (whether it was the Google Assistant through a voice command, or the use of an iPhone application). Our results are important for the advancement of digital forensics, as there are cases starting to emerge in which smart home IoT devices have already been used as culpatory evidence.