Industrial internet of things (IIoT) forensics: The forgotten concept in the race towards industry 4.0
Open accessAbstract
Advances in Industrial Internet of Things (IIoT), inter-connectivity, continuous rise of smart ecosystems, and the quintessential need of process automation has not only opened formidable opportunities, but it has also extended the cyber-threat and attack landscape. Predominantly, this has been witnessed even as industries race towards aligning themselves with the on-demand industry 4.0 goals. Notably, it has become apparent that the convergence and amalgamation of Industrial Operational Technology (OT) with Information Technology (IT) brings about sophiscation, IIoT ecosystem complexities, paradigm shift and overall changes in security and digital forensic investigation architectures. Consequently, as the cybersecurity threat landscape also becomes more complicated in this context, with a widened attack surface, emergent and diverse system behaviors, the digital forensic perspective of IIoT is hardly integrated or addressed as many industries race to realize industry 4.0 objectives at the time of writing this paper. It is based on this premise, that this paper puts an argument that, at the time of writing this paper, there still lacks methodologies, standards, processes or maturity models that have a focus on IIoT forensics as the rat-race towards achieving Industry 4.0 persists. Based on these dimensions, the author explores the scope of IIoT forensics and posits the need of exploring and incorporating forensic standards and methods in IIoT. It is the authors’ opinion that the suppositions fronted herewith may provide fundamental building blocks for future IIoT-centered investigative frameworks.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The IIoT can be seen as a convergence of IT and OT.
“The IIoT can be seen as a convergence of IT and OT [4,12].”
From Mapping of Industrial IoT to IEC 62443 Standards (2025) · cites this paper as [12]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Internet of Things (IoT): A vision, architectural elements, and future directions
Gubbi, J., Buyya, R., Marusic, S., & Palaniswami, M. (2013) · Future Generation Computer Systems · doi:10.1016/j.future.2013.01.010 · Cited by 12,293 · see citing works
Industrial Internet of Things: Challenges, Opportunities, and Directions
Sisinni, E., Saifullah, A., Han, S., Jennehag, U., & Gidlund, M. (2018) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2018.2852491 · Cited by 2,380 · see citing works
Guide to Integrating Forensic Techniques into Incident Response
Kent, K., Chevalier, S., Grance, T., & Dang, H. (2006) · doi:10.6028/nist.sp.800-86 · Cited by 590 · see citing works
Tange, K., De Donno, M., Fafoutis, X., & Dragoni, N. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.3011208 · Cited by 410 · see citing works
Major requirements for building Smart Homes in Smart Cities based on Internet of Things technologies
Hui, T., Sherratt, R. S., & Díaz-Sánchez, D. (2016) · Future Generation Computer Systems · doi:10.1016/j.future.2016.10.026 · Cited by 350 · see citing works
Smart Health Solution Integrating IoT and Cloud: A Case Study of Voice Pathology Monitoring
Muhammad, G., Rahman, S. M. M., Alelaiwi, A., & Alamri, A. (2017) · IEEE Communications Magazine · doi:10.1109/mcom.2017.1600425cm · Cited by 244 · see citing works
Intelligent transportation systems for smart cities: a progress review
Xiong, Z., Sheng, H., Rong, W., et al. (2012) · Science China Information Sciences · doi:10.1007/s11432-012-4725-1 · Cited by 195 · see citing works
Forensic-by-Design Framework for Cyber-Physical Cloud Systems
Rahman, N. H. A., Glisson, W. B., Yang, Y., & Choo, K. R. (2016) · IEEE Cloud Computing · doi:10.1109/mcc.2016.5 · Cited by 169 · see citing works
Internet-of-Things (IoT) Systems
Serpanos, D. N., & Wolf, M. C. (2017) · Springer eBooks · doi:10.1007/978-3-319-69715-4 · Cited by 120 · see citing works
Unmanned aerial vehicles: A preliminary analysis of forensic challenges
Horsman, G. (2015) · Digital Investigation · doi:10.1016/j.diin.2015.11.002 · Cited by 111 · see citing works
Distributed Real-Time IoT for Autonomous Vehicles
Philip, B. V., Alpcan, T., Jin, J., & Palaniswami, M. S. (2018) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2018.2877217 · Cited by 105 · see citing works
A lightweight machine learning-based authentication framework for smart IoT devices
Punithavathi, P., Geetha, S., Karuppiah, M., et al. (2019) · Information Sciences · doi:10.1016/j.ins.2019.01.073 · Cited by 99 · see citing works
Forensic State Acquisition from Internet of Things (FSAIoT)
Meffert, C., Clark, D., Baggili, I., & Breitinger, F. (2017) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3098954.3104053 · Cited by 87 · see citing works
Tool testing and reliability issues in the field of digital forensics
Horsman, G. (2019) · Digital Investigation · doi:10.1016/j.diin.2019.01.009 · Cited by 87 · see citing works
IoT-Forensics Meets Privacy: Towards Cooperative Digital Investigations
Nieto, A., Rı́os, R., & López, J. (2018) · Sensors · doi:10.3390/s18020492 · Cited by 86 · see citing works
Cloud incident handling and forensic‐by‐design: cloud storage as a case study
Rahman, N. H. A., Cahyani, N. D. W., & Choo, K. R. (2016) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.3868 · Cited by 82 · see citing works
Healthcare IT Adoption: An Analysis of Knowledge Transfer in Socioeconomic Networks
Peng, G., Dey, D., & Lahiri, A. (2014) · Journal of Management Information Systems · doi:10.1080/07421222.2014.994672 · Cited by 81 · see citing works
Kebande, V. R., Ikuesan, R. A., Karie, N. M., et al. (2020) · Forensic Science International Reports · doi:10.1016/j.fsir.2020.100122 · Cited by 46 · see citing works
Self-citationOn the importance of standardising the process of generating digital forensic reports
Karie, N. M., Kebande, V. R., Venter, H. S., & Choo, K. R. (2019) · Forensic Science International Reports · doi:10.1016/j.fsir.2019.100008 · Cited by 42 · see citing works
Self-citationA case-based reasoning method for locating evidence during digital forensic device triage
Horsman, G., Laing, C., & Vickers, P. (2014) · Decision Support Systems · doi:10.1016/j.dss.2014.01.007 · Cited by 40 · see citing works
PRASH: A Framework for Privacy Risk Analysis of Smart Homes
Bugeja, J., Jacobsson, A., & Davidsson, P. (2021) · Sensors · doi:10.3390/s21196399 · Cited by 32 · see citing works
Tools, Techniques, and Methodologies
Awad, R. A., Beztchi, S., Smith, J. M., et al. (2018) · doi:10.1145/3295453.3295454 · Cited by 31 · see citing works
Raiders of the lost artefacts: Championing the need for digital forensics research
Horsman, G. (2019) · Forensic Science International Reports · doi:10.1016/j.fsir.2019.100003 · Cited by 23 · see citing works
Realising a Push Button Modality for Video-Based Forensics
Zawali, B., Ikuesan, R. A., Kebande, V. R., Furnell, S., & A-Dhaqm, A. (2021) · Infrastructures · doi:10.3390/infrastructures6040054 · Cited by 22 · see citing works
Self-citationMapping digital forensic application requirement specification to an international standard
Kebande, V. R., Baror, S. O., Parizi, R. M., Choo, K. R., & Venter, H. S. (2020) · Forensic Science International Reports · doi:10.1016/j.fsir.2020.100137 · Cited by 10 · see citing works
Self-citationCritical applications in vehicular ad hoc/sensor networks
Kumar, N., Pathan, A. K., Duarte, E. P., et al. (2014) · Telecommunication Systems · doi:10.1007/s11235-014-9876-5 · Cited by 9 · see citing works
Valli, C. (2009) · Security and Management · Cited by 5 · see citing works
On the Analysis of Semantic Denial-of-Service Attacks Affecting Smart Living Devices
Bugeja, J., Jacobsson, A., & Spalazzese, R. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-52246-9_32 · Cited by 4 · see citing works
Flagged first, then by citations
Research works printed but not linked: 6
- A.-R. Sadeghi, C. Wachsmann, M. Waidner, Security and privacy challenges in industrial internet of things. Proceedings of the 52nd ACM/EDAC/IEEE Design Automation Conference (DAC), IEEE,, 2015, pp. 1-6.
- ISO/IEC,27043: 2015 international standard, information technology -security techniques -incident investigation principles and processes, ISO.org 1, 1 (2015).
- V.R. Kebande, I. Ray, A generic digital forensic investigation framework for internet of things (iot). Proceedings of the IEEE 4th International Conference on Future Internet of Things and Cloud (FiCloud), IEEE, 2016, pp. 356-362.
- J. Bélissent, et al., Getting Clever about Smart Cities: New Opportunities Require New Business Models, Cambridge, Massachusetts, USA, 2010, p. 244.
- K.E. Skouby, P. Lynggaard, Smart home and smart city solutions enabled by 5g, iot, aai and cot services. Proceedings of the International Conference on Contemporary Computing and Informatics (IC3I), IEEE, 2014, pp. 874-878.
- ISA/IEC, 62443: 2020 standard specifies security capabilities for control system components, ISA.org 1, 1 (2020).
Cited by
Sorted by citations
Key Challenges and Emerging Technologies in Industrial IoT Architectures: A Review
Mirani, A. A., Velasco-Hernandez, G., Awasthi, A., & Walsh, J. (2022) · Sensors · doi:10.3390/s22155836 · Cited by 119 · see citing works
Eyeleko, A. H., & Feng, T. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3308195 · Cited by 38 · see citing works
Mapping of Industrial IoT to IEC 62443 Standards
Cindrić, I., Jurčević, M., & Hadjina, T. (2025) · Sensors · doi:10.3390/s25030728 · Cited by 29 · see citing works
- Authors
- Kebande, V. R.
- Affiliations
- Blekinge Institute of Technology (SE)
- Corresponding author
- Kebande, Victor R.
- ORCID
- Kebande, Victor R.
- Venue
- Forensic Science International Reports
- Publisher
- Elsevier BV
- Published
- 2022-07
- Volume
- 5
- Pages
- 100257
- ISSN
- 2665-9107 (ISSN-L)
- OpenAlex
- W4205281937
- Cited by
- 58
- References
- 28
- Citations by year
- 2026: 3 · 2025: 11 · 2024: 17 · 2023: 20 · 2022: 7
- FWCI
- 13.61
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Forensic Science International Reports (publishedVersion, cc-by-nc-nd)
- KTH Publication Database DiVA (KTH Royal Institute of Technology) (submittedVersion, other-oa)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Topics
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Physical Sciences › Engineering › Industrial and Manufacturing Engineering › Digital Transformation in Industry
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Keywords
- Industrial Internet of Things, digital forensics, Industry 4.0, industrial cybersecurity, operational technology, IT-OT convergence, forensic standards, forensic investigation framework, cyber threats, process automation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
