Practical Internet of Things Security - Second Edition

IoT Incident Response and Forensic Analysis

Incident management is an enormous topic, and many excellent and thorough volumes have been written about its utility and execution in the traditional IT enterprise.

At its core, incident management is a life cycle-driven set of activities that range from planning, detection, containment, eradication, and recovery, to the final learning process about what went wrong and how to improve your security posture to prevent similar future incidents.

This chapter provides guidance for organizations—corporate or otherwise—that plan to integrate IoT systems into their enterprises, and that need to develop or update their incident response plans to suit.

Incident management for IoT systems follows the same ...