IoTScent：增强物联网网关的取证能力
IoTScent: Enhancing Forensic Capabilities in Internet of Things Gateways
AI总结：
针对物联网取证中高效采集网络痕迹的需求，提出开源工具IoTScent，支持基于IEEE 802.15.4的物联网流量捕获分析，简化取证数据收集流程，可用于设备识别，推动物联网取证研究发展。
摘要：
消费级物联网设备在人类活动周边的广泛部署，使其成为我们日常行为的数字观察者。这催生了数字取证的一个新领域——物联网取证（IoT Forensics），即物联网设备产生的数字痕迹可作为取证调查的关键证据。因此，需要开发能够高效采集和存储物联网生态系统网络痕迹的工具。本文提出了IoTScent，这是一款开源物联网取证工具，可让物联网网关和家庭自动化平台执行物联网流量捕获与分析。与其他聚焦于基于IP的协议的研究不同，IoTScent专门设计用于处理基于IEEE 802.15.4的流量，该标准是Zigbee、6LoWPAN、Thread等众多物联网专属协议的基础。IoTScent具备实时流量捕获和特征提取功能，提供了一套取证数据收集框架，可简化数据收集管道的搭建任务、自动化数据收集流程，并提供可用于取证证据提取的现成特征。本文对IoTScent工具进行了全面介绍，包含一个实际用例，演示了如何使用该工具从Zigbee流量中进行设备识别。本研究通过解决该领域面临的挑战并公开发布IoTScent工具，为物联网取证领域的持续研究做出了重要贡献。
英文摘要：
The widespread deployment of Consumer Internet of Things devices in proximity to human activities makes them digital observers of our daily actions. This has led to a new field of digital forensics, known as IoT Forensics, where digital traces generated by IoT devices can serve as key evidence for forensic investigations. Thus, there is a need to develop tools that can efficiently acquire and store network traces from IoT ecosystems. This paper presents IoTScent, an open-source IoT forensic tool that enables IoT gateways and Home Automation platforms to perform IoT traffic capture and analysis. Unlike other works focusing on IP-based protocols, IoTScent is specifically designed to operate over IEEE 802.15.4-based traffic, which is the basis for many IoT-specific protocols such as Zigbee, 6LoWPAN and Thread. IoTScent offers live traffic capture and feature extraction capabilities, providing a framework for forensic data collection that simplifies the task of setting up a data collection pipeline, automating the data collection process, and providing ready-made features that can be used for forensic evidence extraction. This work provides a comprehensive description of the IoTScent tool, including a practical use case that demonstrates the use of the tool to perform device identification from Zigbee traffic. The study presented here significantly contributes to the ongoing research in IoT Forensics by addressing the challenges faced in the field and publicly releasing the IoTScent tool.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
