Integrating the edge computing paradigm into the development of IoT forensic methodologies.

With the number of attacks and cyberincidents affecting Internet of Things (IoT) devices on the rise, the need for carrying out forensic investigations to determine what has happened has grown at the same pace. However, due to the characteristics and requirements of this environment, the solutions used until now in the field are not suitable to be followed, as they are not able to guarantee the effective retrieval and study of the pieces of evidence. Under these circumstances, new ways of interacting with IoT units are needed, and the edge computing paradigm has emerged as an interesting asset to complement IoT networks. Attack, anomaly and intrusion detection, or data encryption are some of the fields in which this approach has been successfully applied. Following this concept, this article presents an IoT forensic methodology that integrates the edge computing technology in order to assist in the investigation process, trying to address some of the issues that are hindering the effectiveness of examinations in this scenario. In addition, this proposal is compared with the existing ones in the research community, and evaluated by testing it in two case studies representing real-life scenarios, ultimately demonstrating suitability to be used for IoT forensic examinations. [ABSTRACT FROM AUTHOR]