C-PATR-IoT: A Hierarchical Classified Digital Forensics Framework for IoT

This paper presents a framework for digital forensics of the Internet of Things (IoT) called Preservation, Acquisition, Technical-analysis, and Reporting IoT (C-PATR-IoT) Digital Forensics Framework. The C-PATR-IoT framework lays out a systematic methodology that deals with the enormous scale and the many challenges and factors IoT presents to digital investigators. The process uses a classified, hierarchical, and hybrid approach that considers scale, privacy, ownership, cooperation assumptions, cost, device, Network, and cloud forensics. The methodology simplifies subsequent steps of the selected preservation, acquisition, analysis, and presentation of identified and collected evidence.