{"id":"https://openalex.org/W4401373011","doi":"https://doi.org/10.1016/j.iot.2024.101308","title":"A forensic tool for the identification, acquisition and analysis of sources of evidence in IoT investigations","display_name":"A forensic tool for the identification, acquisition and analysis of sources of evidence in IoT investigations","publication_year":2024,"publication_date":"2024-08-06","ids":{"openalex":"https://openalex.org/W4401373011","doi":"https://doi.org/10.1016/j.iot.2024.101308"},"language":"en","primary_location":{"id":"doi:10.1016/j.iot.2024.101308","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.iot.2024.101308","pdf_url":null,"source":{"id":"https://openalex.org/S4210174276","display_name":"Internet of Things","issn_l":"2542-6605","issn":["2542-6605","2543-1536"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Internet of Things","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.iot.2024.101308","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004929778","display_name":"Sergio Ruiz-Villafranca","orcid":"https://orcid.org/0000-0002-1063-7000"},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Sergio Ruiz-Villafranca","raw_affiliation_strings":["University of Castilla-La Mancha, Avda. de Espa\u00f1a s/n, Albacete, 02071, Spain"],"affiliations":[{"raw_affiliation_string":"University of Castilla-La Mancha, Avda. de Espa\u00f1a s/n, Albacete, 02071, Spain","institution_ids":["https://openalex.org/I79189158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042186318","display_name":"Juan Manuel Castelo G\u00f3mez","orcid":"https://orcid.org/0000-0001-6117-482X"},"institutions":[{"id":"https://openalex.org/I88060688","display_name":"Universidad Polit\u00e9cnica de Madrid","ror":"https://ror.org/03n6nwv02","country_code":"ES","type":"education","lineage":["https://openalex.org/I88060688"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Juan Manuel Castelo G\u00f3mez","raw_affiliation_strings":["Technical University of Madrid, Alan Turing s/n, Madrid, 28031, Spain"],"affiliations":[{"raw_affiliation_string":"Technical University of Madrid, Alan Turing s/n, Madrid, 28031, Spain","institution_ids":["https://openalex.org/I88060688"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079930828","display_name":"Jos\u00e9 Rold\u00e1n-G\u00f3mez","orcid":"https://orcid.org/0000-0001-5787-1294"},"institutions":[{"id":"https://openalex.org/I165339363","display_name":"Universidad de Oviedo","ror":"https://ror.org/006gksa02","country_code":"ES","type":"education","lineage":["https://openalex.org/I165339363"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jos\u00e9 Rold\u00e1n-G\u00f3mez","raw_affiliation_strings":["University of Oviedo, Federico Garc\u00eda Lorca 18, Gij\u00f3n, 33007, Spain"],"affiliations":[{"raw_affiliation_string":"University of Oviedo, Federico Garc\u00eda Lorca 18, Gij\u00f3n, 33007, Spain","institution_ids":["https://openalex.org/I165339363"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5004929778"],"corresponding_institution_ids":["https://openalex.org/I79189158"],"apc_list":{"value":2010,"currency":"USD","value_usd":2010},"apc_paid":{"value":2010,"currency":"USD","value_usd":2010},"fwci":1.6284,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.87063147,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"27","issue":null,"first_page":"101308","last_page":"101308"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7897477149963379},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6939963102340698},{"id":"https://openalex.org/keywords/interoperability","display_name":"Interoperability","score":0.6082727909088135},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6055824160575867},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5980721712112427},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.5320075154304504},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5139145851135254},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.4979367256164551},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4780600368976593},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4700929820537567},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.4392603635787964},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3852795660495758},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.2164294719696045},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2161841094493866},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.15326055884361267},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12136775255203247}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7897477149963379},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6939963102340698},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.6082727909088135},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6055824160575867},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5980721712112427},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.5320075154304504},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5139145851135254},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.4979367256164551},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4780600368976593},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4700929820537567},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.4392603635787964},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3852795660495758},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.2164294719696045},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2161841094493866},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.15326055884361267},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12136775255203247},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.iot.2024.101308","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.iot.2024.101308","pdf_url":null,"source":{"id":"https://openalex.org/S4210174276","display_name":"Internet of Things","issn_l":"2542-6605","issn":["2542-6605","2543-1536"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Internet of Things","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.iot.2024.101308","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.iot.2024.101308","pdf_url":null,"source":{"id":"https://openalex.org/S4210174276","display_name":"Internet of Things","issn_l":"2542-6605","issn":["2542-6605","2543-1536"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Internet of Things","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1651586877","display_name":null,"funder_award_id":"SBPLY/21/180501/000195","funder_id":"https://openalex.org/F4320327216","funder_display_name":"Junta de Comunidades de Castilla-La Mancha"},{"id":"https://openalex.org/G5635525570","display_name":null,"funder_award_id":"2023-GRIN-34056","funder_id":"https://openalex.org/F4320338080","funder_display_name":"European Social Fund"},{"id":"https://openalex.org/G6109097991","display_name":null,"funder_award_id":"PID2021-123627OB-C52","funder_id":"https://openalex.org/F4320327216","funder_display_name":"Junta de Comunidades de Castilla-La Mancha"},{"id":"https://openalex.org/G7258637702","display_name":null,"funder_award_id":"2022-PRED-20677","funder_id":"https://openalex.org/F4320324466","funder_display_name":"Universidad de Castilla-La Mancha"},{"id":"https://openalex.org/G7295734601","display_name":null,"funder_award_id":"PID2022-142332OA-I00","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321595","display_name":"Federaci\u00f3n Espa\u00f1ola de Enfermedades Raras","ror":"https://ror.org/0348bpk17"},{"id":"https://openalex.org/F4320324466","display_name":"Universidad de Castilla-La Mancha","ror":"https://ror.org/05r78ng12"},{"id":"https://openalex.org/F4320327216","display_name":"Junta de Comunidades de Castilla-La Mancha","ror":"https://ror.org/02jv91m18"},{"id":"https://openalex.org/F4320335322","display_name":"European Regional Development Fund","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320338080","display_name":"European Social Fund","ror":"https://ror.org/00k4n6c32"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W1994506898","https://openalex.org/W2056132907","https://openalex.org/W2089944128","https://openalex.org/W2606838258","https://openalex.org/W2611755027","https://openalex.org/W2768348081","https://openalex.org/W2890091795","https://openalex.org/W2896075375","https://openalex.org/W2914874661","https://openalex.org/W2938246551","https://openalex.org/W2942103749","https://openalex.org/W2972062541","https://openalex.org/W3004096956","https://openalex.org/W3024629976","https://openalex.org/W3084027513","https://openalex.org/W3094946486","https://openalex.org/W3135028703","https://openalex.org/W3154915427","https://openalex.org/W3158768135","https://openalex.org/W3167694951","https://openalex.org/W3200028754","https://openalex.org/W3216660278","https://openalex.org/W4220966162","https://openalex.org/W4226319939","https://openalex.org/W4230096340","https://openalex.org/W4230628633","https://openalex.org/W4235799440","https://openalex.org/W4240271402","https://openalex.org/W4242289546","https://openalex.org/W4312084078","https://openalex.org/W4312360047","https://openalex.org/W4323047455","https://openalex.org/W4366189228","https://openalex.org/W4380852974","https://openalex.org/W4403446812","https://openalex.org/W6644299198","https://openalex.org/W6657725075","https://openalex.org/W6727647706","https://openalex.org/W6737826591","https://openalex.org/W6744162405","https://openalex.org/W6744361859","https://openalex.org/W6745609711","https://openalex.org/W6749682557","https://openalex.org/W6752263680","https://openalex.org/W6754575892","https://openalex.org/W6755611258","https://openalex.org/W6755674918","https://openalex.org/W6756491485","https://openalex.org/W6758774323","https://openalex.org/W6766101126","https://openalex.org/W6783135785","https://openalex.org/W6810320004","https://openalex.org/W6847669349","https://openalex.org/W6848186678","https://openalex.org/W6910681941"],"related_works":["https://openalex.org/W2093262417","https://openalex.org/W4312626803","https://openalex.org/W2123131699","https://openalex.org/W650116260","https://openalex.org/W2378329187","https://openalex.org/W4390790060","https://openalex.org/W2134191509","https://openalex.org/W3209454962","https://openalex.org/W79697243","https://openalex.org/W2314257840"],"abstract_inverted_index":{"The":[0],"emergence":[1],"of":[2,5,35,39,48,54,61,65,87,94,116,120,151,184,201],"the":[3,32,37,45,49,52,62,71,85,88,92,95,98,102,108,159,180,193,198],"Internet":[4],"Things":[6],"(IoT)":[7],"has":[8],"posed":[9],"a":[10,23,112,140,186,202],"new":[11],"challenge":[12],"for":[13,78,128,142],"forensic":[14,66,143,203],"investigators,":[15],"who":[16],"find":[17],"themselves":[18],"carrying":[19],"out":[20],"examinations":[21,144],"in":[22,59,100],"very":[24,113],"heterogeneous":[25],"and":[26,74,97,106,131,136,156,191],"novel":[27],"scenario.":[28],"Aspects":[29],"such":[30],"as":[31,139],"high":[33],"number":[34],"devices,":[36],"unlikelihood":[38],"having":[40],"physical":[41],"access":[42],"to":[43,91,196],"them,":[44],"short":[46],"lifetime":[47],"data,":[50],"or":[51],"difficulty":[53],"acquiring":[55,132],"it,":[56],"demand":[57],"changes":[58],"some":[60],"key":[63],"processes":[64],"investigations.":[67],"In":[68,118],"this":[69,122],"regard,":[70],"identification,":[72],"acquisition,":[73],"analysis":[75,157],"phases":[76],"call":[77],"an":[79,125,147,169],"IoT-centred":[80],"approach":[81],"that":[82],"can":[83],"fulfil":[84],"requirements":[86],"environment.":[89],"Due":[90],"interoperability":[93],"IoT,":[96],"way":[99],"which":[101],"data":[103],"is":[104,182],"handled":[105],"exchanged,":[107],"network":[109,134],"traffic":[110,135,154],"becomes":[111],"useful":[114],"source":[115],"evidence.":[117],"view":[119],"this,":[121],"paper":[123],"presents":[124],"automatic":[126],"procedure":[127],"identifying,":[129],"analysing,":[130],"IoT":[133,162],"using":[137],"it":[138,167],"basis":[141],"by":[145,165],"employing":[146],"edge":[148],"node":[149],"capable":[150,183],"performing":[152],"real-time":[153],"monitoring":[155],"on":[158,175],"most":[160],"popular":[161],"protocols.":[163],"Furthermore,":[164],"pairing":[166],"with":[168],"Intrusion":[170],"Detection":[171],"System":[172],"(IDS)":[173],"based":[174],"Machine":[176],"Learning":[177],"(ML)":[178],"algorithms,":[179],"proposal":[181],"following":[185],"proactive":[187],"approach,":[188],"detecting":[189],"threats":[190],"taking":[192],"corresponding":[194],"measures":[195],"assure":[197],"correct":[199],"initiation":[200],"process.":[204]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}