IoT Network Forensics based on Transport Layer

The IoT is concerned in every part of the human beings such as medical care, education, smart cities, home automation, and many business fields. While the IoT gives a myriad of benefits, security remains the biggest issues for using of many IoT applications in various environments. The emergence of new technologies in various fields also pose challenges in the field of forensic researches. It is said that Device Level forensics, Network Level forensics, and Cloud Level forensics are the three types of IoT forensics levels. Among them, Network Level forensics shows all kinds of communication networks that connected to IoT devices over the Internet. In this study, detecting and analyzing TCP-SYN flooding attacks and UDP flooding attacks based on Transport Layer (one type of DoS attacks), network forensics investigation over the traffics are presented. Capturing TCP-SYN flooding attacks and UDP flooding attacks and analyzing them with IO graphs by using Wireshark Network Analysis Tool is also described in this paper.