Security and Forensics in the Internet of Things: Research Advances and Challenges

Considering the billions of Internet of Things (IoT) devices around the world, the IoT has brought convenience to people’s lives, but also created a larger attack surface. Therefore, specific attention should be paid to IoT, especially from two aspects, namely, security and forensics. Security properties, especially authentication, ensure the integrity of large amounts of data processed in IoT networks, while forensic investigations can identify, collect, and retain evidence when abuse in IoT systems occurs. Regarding these two critical aspects, this article introduces and analyzes the latest biometric-based authentication research effort in IoT, as well as some IoT forensic investigation models/frameworks. In addition, we also investigate some unresolved challenges that IoT research still faces and provide a direction for future work.