Research Repository

See what's under the surface

Blockchain based digital forensics investigation framework in the internet of things and social systems

Li, Shancang; Qin, Tao; Min, Geyong

Authors

Shancang Li Shancang.Li@uwe.ac.uk
Senior Lecturer in Computer Forensics and Security

Tao Qin

Geyong Min

Abstract

The decentralised nature of blockchain technologies can well match the needs of integrity and provenances of evidences collecting in digital forensics across jurisdictional borders. In this work, a novel blockchain based digital forensics investigation framework in the Internet of Things (IoT) and social systems environment is proposed, which can provide proof of existence and privacy preservation for evidence items examination. To implement such features, we present a block enabled forensics framework for IoT, namely IoT forensic chain (IoTFC), which can offer forensic investigation with good authenticity, immutability, traceability, resilience, and distributed trust between evidential entitles as well as examiners. The IoTFC can deliver a gurantee of traceability and track provenance of evidence items. Details of evidence identification, preservation, analysis, and presentation will be recorded in chains of block. The IoTFC can increase trust of both evidence items and examiners by providing transparency of the audit train. The use case demonstrated the effectiveness of proposed method.

Journal Article Type Article
Journal IEEE Transactions on Computational Social Systems
Print ISSN 2329-924X
Publisher Institute of Electrical and Electronics Engineers
Peer Reviewed Peer Reviewed
Institution Citation Li, S., Qin, T., & Min, G. (in press). Blockchain based digital forensics investigation framework in the internet of things and social systems. IEEE Transactions on Computational Social Systems, https://doi.org/10.1109/TCSS.2019.2927431
DOI https://doi.org/10.1109/TCSS.2019.2927431
Keywords digital forensics, provenance, evidence items, Internet of Things