{"id":"https://openalex.org/W4415297614","doi":"https://doi.org/10.1145/3772067","title":"ForenThings: An Interactive Framework for Crime Scene Reconstruction in IoT Forensics","display_name":"ForenThings: An Interactive Framework for Crime Scene Reconstruction in IoT Forensics","publication_year":2025,"publication_date":"2025-10-17","ids":{"openalex":"https://openalex.org/W4415297614","doi":"https://doi.org/10.1145/3772067"},"language":"en","primary_location":{"id":"doi:10.1145/3772067","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772067","pdf_url":null,"source":{"id":"https://openalex.org/S4210175912","display_name":"ACM Transactions on Internet of Things","issn_l":"2577-6207","issn":["2577-6207","2691-1914"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Internet of Things","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3772067","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022269512","display_name":"Ehsan Khodayarseresht","orcid":"https://orcid.org/0000-0003-2570-9369"},"institutions":[{"id":"https://openalex.org/I161856759","display_name":"Concordia University","ror":"https://ror.org/01qxhf360","country_code":"US","type":"education","lineage":["https://openalex.org/I161856759"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ehsan Khodayarseresht","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering (CIISE), Concordia University"],"raw_orcid":"https://orcid.org/0000-0003-2570-9369","affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering (CIISE), Concordia University","institution_ids":["https://openalex.org/I161856759"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099099483","display_name":"Sofya Smolyakova","orcid":"https://orcid.org/0009-0009-7298-0144"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Sofya Smolyakova","raw_affiliation_strings":["Concordia University"],"raw_orcid":"https://orcid.org/0009-0009-7298-0144","affiliations":[{"raw_affiliation_string":"Concordia University","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075517496","display_name":"Lianying Zhao","orcid":"https://orcid.org/0000-0002-6376-4062"},"institutions":[{"id":"https://openalex.org/I67031392","display_name":"Carleton University","ror":"https://ror.org/02qtvee93","country_code":"CA","type":"education","lineage":["https://openalex.org/I67031392"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lianying Zhao","raw_affiliation_strings":["Carleton University"],"raw_orcid":"https://orcid.org/0000-0002-6376-4062","affiliations":[{"raw_affiliation_string":"Carleton University","institution_ids":["https://openalex.org/I67031392"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120041519","display_name":"Armin Mansouri","orcid":null},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Armin Mansouri","raw_affiliation_strings":["Concordia University"],"raw_orcid":"https://orcid.org/0009-0004-9744-5280","affiliations":[{"raw_affiliation_string":"Concordia University","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013360015","display_name":"Suryadipta Majumdar","orcid":"https://orcid.org/0000-0002-6501-4214"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Suryadipta Majumdar","raw_affiliation_strings":["Concordia University"],"raw_orcid":"https://orcid.org/0000-0002-6501-4214","affiliations":[{"raw_affiliation_string":"Concordia University","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063847107","display_name":"Mauro Conti","orcid":"https://orcid.org/0000-0002-3612-1934"},"institutions":[{"id":"https://openalex.org/I138689650","display_name":"University of Padua","ror":"https://ror.org/00240q980","country_code":"IT","type":"education","lineage":["https://openalex.org/I138689650"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mauro Conti","raw_affiliation_strings":["University of Padua"],"raw_orcid":"https://orcid.org/0000-0002-3612-1934","affiliations":[{"raw_affiliation_string":"University of Padua","institution_ids":["https://openalex.org/I138689650"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5022269512"],"corresponding_institution_ids":["https://openalex.org/I161856759"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.40452535,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":"1","first_page":"1","last_page":"31"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.569599986076355},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5058000087738037},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.46309998631477356},{"id":"https://openalex.org/keywords/smart-objects","display_name":"Smart objects","score":0.46219998598098755},{"id":"https://openalex.org/keywords/instrumentation","display_name":"Instrumentation (computer programming)","score":0.45980000495910645},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.45089998841285706},{"id":"https://openalex.org/keywords/crime-scene","display_name":"Crime scene","score":0.4016999900341034},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.3991999924182892}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7254999876022339},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.569599986076355},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5058000087738037},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48590001463890076},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.46309998631477356},{"id":"https://openalex.org/C2780202397","wikidata":"https://www.wikidata.org/wiki/Q2294986","display_name":"Smart objects","level":3,"score":0.46219998598098755},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.45980000495910645},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.45089998841285706},{"id":"https://openalex.org/C171906077","wikidata":"https://www.wikidata.org/wiki/Q1360677","display_name":"Crime scene","level":2,"score":0.4016999900341034},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.3991999924182892},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.3882000148296356},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.36160001158714294},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.32440000772476196},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.2793999910354614},{"id":"https://openalex.org/C176563091","wikidata":"https://www.wikidata.org/wiki/Q669238","display_name":"Intelligent sensor","level":3,"score":0.27219998836517334},{"id":"https://openalex.org/C83931994","wikidata":"https://www.wikidata.org/wiki/Q1149653","display_name":"Building automation","level":2,"score":0.2687000036239624},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2623000144958496},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2572000026702881},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.25119999051094055},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3772067","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772067","pdf_url":null,"source":{"id":"https://openalex.org/S4210175912","display_name":"ACM Transactions on Internet of Things","issn_l":"2577-6207","issn":["2577-6207","2691-1914"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Internet of Things","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3772067","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772067","pdf_url":null,"source":{"id":"https://openalex.org/S4210175912","display_name":"ACM Transactions on Internet of Things","issn_l":"2577-6207","issn":["2577-6207","2691-1914"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Internet of Things","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2508433864","https://openalex.org/W2747669027","https://openalex.org/W2792078641","https://openalex.org/W2947175569","https://openalex.org/W2959564865","https://openalex.org/W2962703433","https://openalex.org/W2963606273","https://openalex.org/W2978956219","https://openalex.org/W2983277367","https://openalex.org/W2999472659","https://openalex.org/W3007878096","https://openalex.org/W3008508243","https://openalex.org/W3014810737","https://openalex.org/W3015650867","https://openalex.org/W3099203541","https://openalex.org/W3128959222","https://openalex.org/W3142742079","https://openalex.org/W4221001515","https://openalex.org/W4243371102","https://openalex.org/W4291825579","https://openalex.org/W4293193114","https://openalex.org/W4297320219","https://openalex.org/W4300424244","https://openalex.org/W4308469411","https://openalex.org/W4312551646","https://openalex.org/W4352977792","https://openalex.org/W4367047240","https://openalex.org/W4385756495","https://openalex.org/W4386124038","https://openalex.org/W4388867283","https://openalex.org/W4392939489","https://openalex.org/W4396754383"],"related_works":[],"abstract_inverted_index":{"In":[0],"IoT":[1,30,53,73,102,146,168],"platforms,":[2],"devices":[3],"and":[4,48,104,140,157,165,194],"sensors":[5],"can":[6,33,176],"interact":[7],"with":[8,191],"each":[9,101],"other":[10],"via":[11],"smart":[12,42,93,105,189],"apps":[13],"that":[14,174],"utilize":[15],"automation":[16],"settings":[17],"preconfigured":[18],"by":[19,144],"users,":[20],"resulting":[21],"in":[22,41,92,115,182,187],"significant":[23],"amounts":[24],"of":[25,119,125],"potential":[26],"forensic":[27,31,74,117],"data.":[28],"Existing":[29],"approaches":[32],"pinpoint":[34],"relevant":[35],"data":[36,179],"sources":[37],"for":[38,71,88,153,161],"specific":[39],"activities":[40],"environments":[43],"using":[44],"static":[45,128],"code":[46,61,69,129],"analysis":[47,130],"instrumentation":[49],"techniques.":[50],"However,":[51],"recent":[52],"platforms":[54],"like":[55],"SmartThings":[56,155],"no":[57],"longer":[58],"run":[59],"application":[60],"on":[62,127],"their":[63],"infrastructure,":[64],"making":[65],"access":[66],"to":[67,99,107,113],"source":[68],"impossible":[70],"existing":[72],"solutions.":[75],"To":[76],"bridge":[77],"this":[78,80],"gap,":[79],"paper":[81],"introduces":[82],"ForenThings":[83,133,151,175],",":[84],"an":[85],"interactive":[86],"framework":[87],"crime":[89,185],"scene":[90,136],"reconstruction":[91],"environments.":[94],"The":[95,171],"main":[96],"idea":[97],"is":[98],"convert":[100],"device":[103,139],"app":[106,141],"a":[108,116,120,150,188],"responsive":[109],"agent,":[110],"enabling":[111],"them":[112],"participate":[114],"investigation":[118],"security":[121],"incident":[122],"collaboratively.":[123],"Instead":[124],"relying":[126],"or":[131],"instrumentation,":[132],"reconstructs":[134],"the":[135,138,145,154],"from":[137],"events":[142],"forwarded":[143],"platform.":[147],"We":[148],"develop":[149],"prototype":[152],"platform":[156],"test":[158],"its":[159],"effectiveness":[160],"both":[162],"normal":[163],"scenarios":[164],"12":[166],"real-world":[167],"attack":[169],"scenarios.":[170],"evaluation":[172],"shows":[173],"achieve":[177],"100%":[178],"provenance":[180],"coverage":[181],"reconstructing":[183],"various":[184],"scenes":[186],"environment":[190],"negligible":[192],"runtime":[193],"resource":[195],"overhead.":[196]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-18T00:00:00"}