The introduction of Internet of Things (IoT) ecosystems into personal homes and businesses prompts the idea that such ecosystems contain residual data, which can be used as digital evidence in court proceedings. However, the forensic examination of IoT ecosystems introduces a number of investigative problems for the digital forensics community. One of these problems is the limited availability of practical processes and techniques to guide the preservation and analysis of residual data from these ecosystems. Focusing on a detailed case study of the iHealth Smart Scale ecosystem, we present an empirical demonstration of practical techniques to recover residual data from different evidence sources within a smart scale ecosystem. We also document the artifacts that can be recovered from a smart scale ecosystem, which could inform a digital (forensic) investigation. The findings in this research provides a foundation for future studies regarding the development of processes and techniques suitable for extracting and examining residual data from IoT ecosystems.

In today's age of instant gratification, mobile dating applications (apps) provide the comfort of meeting new people at the swipe of a finger. However, recent high profile incidents have raised security and privacy-related concerns with the use of these apps. The level of harm that can be inflicted on a victim using these apps can either be physical (e.g., murder, stalking, or sexual assault) or non-physical (e.g., identity theft, harassment, or cyber-stalking). In this paper, we study seven popular Android mobile dating apps, and the Google Chrome browser app (which can be used to access a particular dating service). Using an adversary model, we demonstrate how one can trivially conduct a man-in-the-middle attack against these mobile dating apps. The results of our study reveal that mobile dating apps are, potentially, vulnerable to security risks. In particular, our findings show that an adversary can intercept personal and private information in plaintext. This information can then be used to access a potential victim's mobile dating app profile. With our findings in mind, we then explain how the Routine Activity Theory can be applied to design mitigation strategies for mobile dating apps.

The integration of information technology into medical environments introduces a variety of opportunities and challenges for the healthcare community. Medical devices such as ventilators, patient monitors, and infusion pumps, which once operated as standalone devices, now integrate network communication technology. As a result, these modern medical devices produce, store, and transmit large amounts of patient and therapy information. From a digital forensics' perspective, this information could provide a forensic investigator with a treasure trove of potential digital evidence. Hence, the purpose of this paper is to introduce and discuss the potential place and value of digital forensics processes within the context of healthcare providers, through five scenarios. The aim of the paper is twofold. First, it raises incentives for integrating digital forensics into various scenarios involving healthcare providers. Second, it encourages future research to address the adoption of digital forensics tools and techniques to assist stakeholders in the medical domain.

As security incidents continue to impact organisations, there is a growing demand for systems to be `forensic-ready' - to maximise the potential use of evidence whilst minimising the costs of an investigation. Researchers have supported organisational forensic readiness efforts by proposing the use of policies and processes, aligning systems with forensics objectives and training employees. However, recent work has also proposed an alternative strategy for implementing forensic readiness called forensic-by-design. This is an approach that involves integrating requirements for forensics into relevant phases of the systems development lifecycle with the aim of engineering forensic-ready systems. While this alternative forensic readiness strategy has been discussed in the literature, no previous research has examined the extent to which organisations actually use this approach for implementing forensic readiness. Hence, we investigate the extent to which organisations consider requirements for forensics during systems development. We first assessed existing research to identify the various perspectives of implementing forensic readiness, and then undertook an online survey to investigate the consideration of requirements for forensics during systems development lifecycles. Our findings provide an initial assessment of the extent to which requirements for forensics are considered within organisations. We then use our findings, coupled with the literature, to identify a number of research challenges regarding the engineering of forensic-ready systems.