Digital Forensic Investigation of Internet of Things (IoT) Devices

Connected devices can leave evidence across more than one place: a handset, a vehicle network, a drone, a cloud service, or an industrial system. Digital Forensic Investigation of Internet of Things (IoT) Devices brings together research on the investigative methods and security questions that arise across this expanding landscape.

Edited by Reza Montasari, Hamid Jahankhani, Richard Hill, and Simon Parkinson, this multi-author collection takes a broad, technically grounded look at IoT forensics. Its chapters range from evidence collection and analysis to malware detection, network security, and the challenges of investigating interconnected systems.

Investigating evidence across connected systems

The collection opens with research on Android malware detection, comparing emulation with analysis performed on an actual device, and on quantifying evidence volatility in resource-constrained devices. These topics highlight two practical concerns for investigators: how evidence is gathered, and how device limitations or changing data may affect what can be examined.

From drones to vehicle networks

Further chapters consider drone forensics and intrusion detection in Controller Area Network (CAN) vehicle networks. Together, they extend the discussion beyond conventional computers and phones to devices and systems whose operation can create distinctive investigative challenges.

Security questions in the cloud and industrial IoT

The book also examines hardware-based attacks on cloud computing, biometric security in IoT devices, and security resistance in industrial IoT. Chapters on establishing trustworthy relationships in multiparty industrial applications and on current issues in IoT forensics broaden the view from individual devices to connected environments.

Research-led perspectives for advanced readers

Artificial intelligence and machine learning for actionable cyber threat intelligence, along with evidence-based approaches to IoT sustainability, add further perspectives to the volume. The result is a collection of specialist contributions rather than a single step-by-step field manual—useful for comparing research questions and approaches across areas of digital investigation.

Who may find this collection useful?

Digital-forensics and cybersecurity practitioners, researchers, and advanced students can use this volume to explore the breadth of IoT investigation, from device-level evidence concerns to networked and industrial systems. Its varied chapters offer a substantial reference point for readers studying how forensic inquiry adapts as everyday objects become part of larger digital environments.